Florian Westphal
7866cc57b5
netns: add and use net_ns_barrier ...
Quoting Joe Stringer:
If a user loads nf_conntrack_ftp, sends FTP traffic through a network
namespace, destroys that namespace then unloads the FTP helper module,
then the kernel will crash.
Events that lead to the crash:
1. conntrack is created with ftp helper in netns x
2. This netns is destroyed
3. netns destruction is scheduled
4. netns destruction wq starts, removes netns from global list
5. ftp helper is unloaded, which resets all helpers of the conntracks
via for_each_net()
but because netns is already gone from list the for_each_net() loop
doesn't include it, therefore all of these conntracks are unaffected.
6. helper module unload finishes
7. netns wq invokes destructor for rmmod'ed helper
CC: "Eric W. Biederman" <ebiederm@xmission.com>
Reported-by: Joe Stringer <joe@ovn.org>
Signed-off-by: Florian Westphal <fw@strlen.de>
Acked-by: David S. Miller <davem@davemloft.net>
Acked-by: "Eric W. Biederman" <ebiederm@xmission.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2017-06-19 19:09:19 +02:00
9p: constify ->d_name handling
2017-01-12 04:01:17 -05:00
Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value
2017-04-12 22:02:37 +02:00
scripts/spelling.txt: add "overide" pattern and fix typo instances
2017-03-09 17:01:09 -08:00
netfilter: nf_tables: pass set description to ->privsize
2017-05-29 12:46:18 +02:00
can: network namespace support for CAN gateway
2017-04-25 09:04:30 +02:00
NFC: Add nfc_dbg() macro
2017-04-05 10:15:20 +02:00
sock: struct proto hash function may error
2016-02-11 03:54:14 -05:00
sctp: process duplicated strreset out and addstrm out requests correctly
2017-04-18 13:39:50 -04:00
net/sched: Removed unused vlan actions definition
2017-04-06 13:28:35 -07:00
6lowpan: Fix IID format for Bluetooth
2017-04-12 22:02:36 +02:00
net: sched: add termination action to allow goto chain
2017-05-17 15:22:13 -04:00
ipv6: reorder ip6_route_dev_notifier after ipv6_dev_notf
2017-05-08 17:31:24 -04:00
rxrpc: Note a successfully aborted kernel operation
2017-04-06 10:11:59 +01:00
af_unix: split 'u->readlock' into two: 'iolock' and 'bindlock'
2016-09-04 13:29:29 -07:00
VSOCK: Add vsockmon tap functions
2017-04-24 12:35:56 -04:00
net: add confirm_neigh method to dst_ops
2017-02-07 13:07:46 -05:00
bonding: 3ad: apply ad_actor settings changes immediately
2016-02-09 04:45:49 -05:00
bonding: fix wq initialization for links created via netlink
2017-04-21 15:28:37 -04:00
net: Commonize busy polling code to focus on napi_id instead of socket
2017-03-24 20:49:31 -07:00
calipso: Add a label cache.
2016-06-27 15:06:17 -04:00
cfg80211: fix multi scheduled scan kernel-doc
2017-05-08 13:09:38 +02:00
ieee802154: add netns support
2016-07-08 12:20:57 +02:00
csum: eliminate sparse warning in remcsum_unadjust()
2017-01-20 12:12:13 -05:00
netlabel: out of bound access in cipso_v4_validate()
2017-02-04 19:44:22 -05:00
cls_cgroup: get sk_classid only from full sockets
2016-04-19 20:09:25 -04:00
codel: split into multiple files
2016-04-25 16:44:27 -04:00
codel: split into multiple files
2016-04-25 16:44:27 -04:00
net_sched: fq_codel: cache skb->truesize into skb->cb
2016-06-25 12:19:35 -04:00
packet: compat support for sock_fprog
2016-06-09 23:41:03 -07:00
net/devlink: Add E-Switch encapsulation control
2017-04-22 20:26:37 +03:00
net: dsa: move notifier info to private header
2017-05-22 19:37:32 -04:00
net: make struct dst_entry::dev first member
2017-05-18 10:30:36 -04:00
net: add dst_cache support
2016-02-16 20:21:48 -05:00
net/dst: Add dst port to dst_metadata utility functions
2016-11-09 13:41:54 -05:00
net: add confirm_neigh method to dst_ops
2017-02-07 13:07:46 -05:00
esp6: Reorganize esp_output
2017-04-14 10:06:42 +02:00
net: rtnetlink: plumb extended ack to doit function
2017-04-17 15:35:38 -04:00
flowcache: make flow_key_size() return "unsigned int"
2017-04-03 19:04:48 -07:00
flow_dissector: add mpls support (v2)
2017-04-24 14:30:46 -04:00
flowcache: more "unsigned int"
2017-04-03 19:04:48 -07:00
fou: Add encap ops for IPv6 tunnels
2016-05-20 18:03:16 -04:00
fq.h: Port memory limit mechanism from fq_codel
2016-09-30 13:29:21 +02:00
fq.h: Port memory limit mechanism from fq_codel
2016-09-30 13:29:21 +02:00
net_sched: gen_estimator: complete rewrite of rate estimators
2016-12-05 15:21:59 -05:00
netlink: pass extended ACK struct to parsing functions
2017-04-13 13:58:22 -04:00
net: Remove deprecated tunnel specific UDP offload functions
2016-06-17 20:23:32 -07:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2016-08-18 01:17:32 -04:00
gro_cells: move to net/core/gro_cells.c
2017-02-08 14:38:18 -05:00
gtp: #define #define _GTP_H_ and not #define _GTP_H
2016-07-25 17:55:43 -07:00
net: add a hardware buffer management helper API
2016-03-14 12:19:46 -04:00
net: snmp: kill STATS_BH macros
2016-04-27 22:48:25 -04:00
wireless: radiotap: rewrite the radiotap header file
2017-01-25 16:00:33 +01:00
net/ipv6: allow sysctl to change link-local address generation mode
2017-01-27 10:25:34 -05:00
net: Introduce ife encapsulation module
2017-02-03 15:16:45 -05:00
inet: drop ->bind_conflict
2017-01-18 13:04:28 -05:00
tcp/dccp: do not touch listener sk_refcnt under synflood
2016-04-04 22:11:20 -04:00
net: Work around lockdep limitation in sockets that use sockets
2017-03-09 18:23:27 -08:00
net: Work around lockdep limitation in sockets that use sockets
2017-03-09 18:23:27 -08:00
ipv6: suppress sparse warnings in IP6_ECN_set_ce()
2016-08-13 15:08:00 -07:00
net: make struct inet_frags::qsize unsigned
2017-05-23 11:13:19 -04:00
inet: reset tb->fastreuseport when adding a reuseport sk
2017-01-18 13:04:29 -05:00
net/tcp-fastopen: Add new API support
2017-01-25 14:04:38 -05:00
ipv4: Namespaceify tcp_tw_recycle and tcp_max_tw_buckets knob
2016-12-29 11:38:31 -05:00
net: ipv4: Refine the ipv4_default_advmss
2017-04-13 13:19:48 -04:00
ipv6: Pass proto to csum_ipv6_magic as __u8 instead of unsigned short
2016-03-13 23:55:13 -04:00
net: ipv6: Plumb extack through route add functions
2017-05-22 12:12:20 -04:00
net: ipv6: Plumb extack through route add functions
2017-05-22 12:12:20 -04:00
ip6_tunnel: Allow policy-based routing through tunnels
2017-04-21 13:21:30 -04:00
net: ipv4: Plumb extack through route add functions
2017-05-22 12:12:19 -04:00
ip_tunnel: Allow policy-based routing through tunnels
2017-04-21 13:21:31 -04:00
ipvs: remove unused function ip_vs_set_state_timeout
2017-04-28 12:00:10 +02:00
ipv6: fix flow labels when the traffic class is non-0
2017-01-31 13:16:59 -05:00
wext: uninline stream addition functions
2017-01-13 09:38:42 +01:00
kcm: Use stream parser
2016-08-17 19:36:23 -04:00
net: ipv4: Do not drop to make_route if oif is l3mdev
2016-10-13 12:05:26 -04:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2017-02-11 02:31:11 -05:00
mac80211: properly remove RX_ENC_FLAG_40MHZ
2017-05-08 11:11:56 +02:00
ieee802154: cleanup WARN_ON for fc fetch
2016-07-08 13:23:12 +02:00
openvswitch: use mpls_hdr
2016-10-03 02:00:22 -04:00
net: mpls: Increase max number of labels for lwt encap
2017-04-01 20:21:44 -07:00
net/ncsi: Introduce ncsi_stop_dev()
2016-10-04 02:11:51 -04:00
ipv6: add support for NETDEV_RESEND_IGMP event
2017-03-28 22:02:21 -07:00
net: neigh: make ->hh_len 32-bit
2017-04-12 13:59:21 -04:00
netns: add and use net_ns_barrier
2017-06-19 19:09:19 +02:00
neigh: Send a notification when DELAY_PROBE_TIME changes
2016-07-05 09:06:29 -07:00
netlabel: Implement CALIPSO config functions for SMACK.
2016-06-27 15:06:18 -04:00
netlink: pass extended ACK struct to parsing functions
2017-04-13 13:58:22 -04:00
ieee802154: add netns support
2016-07-08 12:20:57 +02:00
net: ping: make ping_v6_sendmsg static
2016-03-23 22:09:58 -04:00
net: sched: introduce multichain support for filters
2017-05-17 15:22:13 -04:00
net: sched: move tc_classify function to cls_api.c
2017-05-17 15:22:13 -04:00
pptp: Refactor the struct and macros of PPTP codes
2016-08-15 10:55:53 -07:00
net: Add sysctl to toggle early demux for tcp and udp
2017-03-24 13:17:07 -07:00
net: Introduce psample, a new genetlink channel for packet sampling
2017-01-24 13:44:28 -05:00
net: ip, diag -- Add diag interface for raw sockets
2016-10-23 19:35:24 -04:00
net: ip, diag -- Add diag interface for raw sockets
2016-10-23 19:35:24 -04:00
ktime: Get rid of the union
2016-12-25 17:21:22 +01:00
net: make struct request_sock_ops::obj_size unsigned
2017-05-23 11:13:19 -04:00
Revert "ipv4: restore rt->fi for reference counting"
2017-05-08 22:35:32 -04:00
net: rtnetlink: plumb extended ack to doit function
2017-04-17 15:35:38 -04:00
net: sched: add termination action to allow goto chain
2017-05-17 15:22:13 -04:00
sched/headers: Prepare to remove <linux/cred.h> inclusion from <linux/sched.h>
2017-03-02 08:42:31 +01:00
tcp: randomize timestamps on syncookies
2017-05-05 12:00:11 -04:00
ipv6: sr: add core files for SR HMAC support
2016-11-09 20:40:06 -05:00
ipv6: sr: add core files for SR HMAC support
2016-11-09 20:40:06 -05:00
smc: netlink interface for SMC sockets
2017-01-09 16:07:41 -05:00
net: snmp: fix 64bit stats on 32bit arches
2016-04-28 11:49:45 -04:00
tcp: internal implementation for pacing
2017-05-16 15:43:31 -04:00
soreuseport: fix NULL ptr dereference SO_REUSEPORT after bind
2016-01-19 14:44:23 -05:00
kcm: Remove TCP specific references from kcm and strparser
2016-08-28 23:32:41 -04:00
switchdev: bridge: Offload mc router ports
2017-02-10 11:46:39 -05:00
tcp: switch TCP TS option (RFC 7323) to 1ms clock
2017-05-17 16:06:01 -04:00
ipv6: add new struct ipcm6_cookie
2016-05-03 16:08:14 -04:00
udp: use a separate rx queue for packet reception
2017-05-16 15:41:29 -04:00
vxlan: Add new UDP encapsulation offload type for VXLAN-GPE
2016-06-17 20:23:32 -07:00
udp: use a separate rx queue for packet reception
2017-05-16 15:41:29 -04:00
vxlan: remove unsed vxlan_dev_dst_port()
2016-11-15 12:16:13 -05:00
net: x25: fix one potential use-after-free issue
2017-05-18 10:05:40 -04:00
net: Add a xfrm validate function to validate_xmit_skb
2017-04-14 10:07:28 +02:00
7866cc57b5