linux/net/netfilter
Patrick McHardy 337fbc4166 [NETFILTER]: ip_conntrack: fix NAT helper unload races
The NAT helpr hooks are protected by RCU, but all of the
conntrack helpers test and use the global pointers instead
of copying them first using rcu_dereference()

Also replace synchronize_net() by synchronize_rcu() for clarity
since sychronizing only with packet receive processing is
insufficient to prevent races.

Signed-off-by: Patrick McHardy <kaber@trash.net>
2006-12-02 21:31:22 -08:00
..
core.c [NETFILTER]: More __read_mostly annotations 2006-12-02 21:31:08 -08:00
Kconfig [NETFILTER]: xt_CONNSECMARK: fix Kconfig dependencies 2006-10-15 23:14:09 -07:00
Makefile [NETFILTER]: nf_conntrack: automatic sysctl registation for conntrack protocols 2006-12-02 21:31:17 -08:00
nf_conntrack_core.c [NETFILTER]: nf_conntrack: sysctl compatibility with old connection tracking 2006-12-02 21:31:19 -08:00
nf_conntrack_ecache.c [NETFILTER]: nf_conntrack: rename struct nf_conntrack_protocol 2006-12-02 21:31:09 -08:00
nf_conntrack_expect.c [NETFILTER]: conntrack: add '_get' to {ip, nf}_conntrack_expect_find 2006-12-02 21:31:21 -08:00
nf_conntrack_ftp.c [NETFILTER]: ip_conntrack: fix NAT helper unload races 2006-12-02 21:31:22 -08:00
nf_conntrack_helper.c [NETFILTER]: nf_conntrack: rename struct nf_conntrack_protocol 2006-12-02 21:31:09 -08:00
nf_conntrack_l3proto_generic.c [NETFILTER]: nf_conntrack: /proc compatibility with old connection tracking 2006-12-02 21:31:20 -08:00
nf_conntrack_netlink.c [NETFILTER]: conntrack: add '_get' to {ip, nf}_conntrack_expect_find 2006-12-02 21:31:21 -08:00
nf_conntrack_proto.c [NETFILTER]: nf_conntrack: sysctl compatibility with old connection tracking 2006-12-02 21:31:19 -08:00
nf_conntrack_proto_generic.c [NETFILTER]: nf_conntrack: sysctl compatibility with old connection tracking 2006-12-02 21:31:19 -08:00
nf_conntrack_proto_sctp.c [NETFILTER]: nf_conntrack: sysctl compatibility with old connection tracking 2006-12-02 21:31:19 -08:00
nf_conntrack_proto_tcp.c [NETFILTER]: nf_conntrack: sysctl compatibility with old connection tracking 2006-12-02 21:31:19 -08:00
nf_conntrack_proto_udp.c [NETFILTER]: nf_conntrack: sysctl compatibility with old connection tracking 2006-12-02 21:31:19 -08:00
nf_conntrack_standalone.c [NETFILTER]: conntrack: add '_get' to {ip, nf}_conntrack_expect_find 2006-12-02 21:31:21 -08:00
nf_internals.h [NETFILTER]: nf_queue: handle GSO packets 2006-09-22 14:53:55 -07:00
nf_log.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
nf_queue.c [NETFILTER]: nf_queue: handle GSO packets 2006-09-22 14:53:55 -07:00
nf_sockopt.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
nf_sysctl.c [NETFILTER]: nf_conntrack: automatic sysctl registation for conntrack protocols 2006-12-02 21:31:17 -08:00
nfnetlink.c Remove obsolete #include <linux/config.h> 2006-06-30 19:25:36 +02:00
nfnetlink_log.c [NET]: Turn nfmark into generic mark 2006-12-02 21:21:38 -08:00
nfnetlink_queue.c [NET]: Turn nfmark into generic mark 2006-12-02 21:21:38 -08:00
x_tables.c [NETFILTER]: x_tables: simplify compat API 2006-09-22 15:20:01 -07:00
xt_CLASSIFY.c [NETFILTER]: x_tables: remove unused argument to target functions 2006-09-22 14:55:33 -07:00
xt_comment.c [NETFILTER]: x_tables: make use of mass registation helpers 2006-09-22 14:55:32 -07:00
xt_connbytes.c [NETFILTER]: x_tables: remove unused size argument to check/destroy functions 2006-09-22 14:55:34 -07:00
xt_CONNMARK.c [NETFILTER]: nf_conntrack: split out the event cache 2006-12-02 21:31:06 -08:00
xt_connmark.c [NETFILTER]: fix cut-and-paste error in exit functions 2006-10-15 23:14:06 -07:00
xt_CONNSECMARK.c [NETFILTER]: x_tables: Fix typos after conversion to use mass registation helper 2006-09-22 14:55:40 -07:00
xt_conntrack.c [NETFILTER]: xt_conntrack: clean up overly long lines 2006-09-22 15:19:46 -07:00
xt_dccp.c [NETFILTER]: x_tables: remove unused size argument to check/destroy functions 2006-09-22 14:55:34 -07:00
xt_DSCP.c [NETFILTER]: x_tables: remove unused size argument to check/destroy functions 2006-09-22 14:55:34 -07:00
xt_dscp.c [NETFILTER]: x_tables: remove unused size argument to check/destroy functions 2006-09-22 14:55:34 -07:00
xt_esp.c [NETFILTER]: x_tables: remove unused size argument to check/destroy functions 2006-09-22 14:55:34 -07:00
xt_helper.c [NETFILTER]: x_tables: remove unused size argument to check/destroy functions 2006-09-22 14:55:34 -07:00
xt_length.c [NETFILTER]: x_tables: make use of mass registation helpers 2006-09-22 14:55:32 -07:00
xt_limit.c [NETFILTER]: xt_limit: add compat conversion functions 2006-09-22 15:20:06 -07:00
xt_mac.c [NETFILTER]: x_tables: make use of mass registation helpers 2006-09-22 14:55:32 -07:00
xt_MARK.c [NET]: Turn nfmark into generic mark 2006-12-02 21:21:38 -08:00
xt_mark.c [NET]: Turn nfmark into generic mark 2006-12-02 21:21:38 -08:00
xt_multiport.c [NET]: Supporting UDP-Lite (RFC 3828) in Linux 2006-12-02 21:22:46 -08:00
xt_NFQUEUE.c [NETFILTER]: fix cut-and-paste error in exit functions 2006-10-15 23:14:06 -07:00
xt_NOTRACK.c [NETFILTER]: x_tables: remove unused argument to target functions 2006-09-22 14:55:33 -07:00
xt_physdev.c [NETFILTER]: x_tables: remove unused size argument to check/destroy functions 2006-09-22 14:55:34 -07:00
xt_pkttype.c [NETFILTER]: x_tables: make use of mass registation helpers 2006-09-22 14:55:32 -07:00
xt_policy.c [NETFILTER]: xt_policy: remove dups in .family 2006-09-22 15:19:56 -07:00
xt_quota.c [NETFILTER]: x_tables: remove unused size argument to check/destroy functions 2006-09-22 14:55:34 -07:00
xt_realm.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
xt_sctp.c [SCTP]: Netfilter sctp annotations. 2006-12-02 21:27:12 -08:00
xt_SECMARK.c [NETFILTER]: x_tables: Fix typos after conversion to use mass registation helper 2006-09-22 14:55:40 -07:00
xt_state.c [NETFILTER]: x_tables: remove unused size argument to check/destroy functions 2006-09-22 14:55:34 -07:00
xt_statistic.c [NETFILTER]: x_tables: remove unused size argument to check/destroy functions 2006-09-22 14:55:34 -07:00
xt_string.c [NETFILTER]: x_tables: remove unused size argument to check/destroy functions 2006-09-22 14:55:34 -07:00
xt_tcpmss.c [NETFILTER]: xt_tcpmss: minor cleanups 2006-09-22 14:55:38 -07:00
xt_tcpudp.c [NET]: Supporting UDP-Lite (RFC 3828) in Linux 2006-12-02 21:22:46 -08:00