lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Sun, 11 Sep 2011 01:19:10 +0800 From: Wanlong Gao <wanlong.gao@...il.com> To: linux-kernel@...r.kernel.org, netdev@...r.kernel.org Cc: davem@...emloft.net, eric.dumazet@...il.com, omarapazanadi@...il.com, Gao feng <gaofeng@...fujitsu.com> Subject: [PATCH] fib:fix BUG_ON in fib_nl_newrule when add new fib rule From: Gao feng <gaofeng@...fujitsu.com> add new fib rule can cause BUG_ON the reproduce shell is #ip rule add pref 38 #ip rule add pref 38 #ip rule add to 192.168.3.0/24 goto 38 #ip rule del pref 38 #ip rule add to 192.168.3.0/24 goto 38 #ip rule add pref 38 then the BUG_ON will happen add a var unresolved in struct fib_rule and use it to identify whether this rule is unresolved Signed-off-by: Gao feng <gaofeng@...fujitsu.com> --- include/net/fib_rules.h | 1 + net/core/fib_rules.c | 5 ++++- 2 files changed, 5 insertions(+), 1 deletions(-) diff --git a/include/net/fib_rules.h b/include/net/fib_rules.h index 075f1e3..e4bae01 100644 --- a/include/net/fib_rules.h +++ b/include/net/fib_rules.h @@ -19,6 +19,7 @@ struct fib_rule { u32 flags; u32 table; u8 action; + u8 unresolved; u32 target; struct fib_rule __rcu *ctarget; char iifname[IFNAMSIZ]; diff --git a/net/core/fib_rules.c b/net/core/fib_rules.c index e7ab0c0..aa20560 100644 --- a/net/core/fib_rules.c +++ b/net/core/fib_rules.c @@ -384,9 +384,11 @@ static int fib_nl_newrule(struct sk_buff *skb, struct nlmsghdr* nlh, void *arg) */ list_for_each_entry(r, &ops->rules_list, list) { if (r->action == FR_ACT_GOTO && - r->target == rule->pref) { + r->target == rule->pref && + r->unresolved) { BUG_ON(rtnl_dereference(r->ctarget) != NULL); rcu_assign_pointer(r->ctarget, rule); + r->unresolved = 0; if (--ops->unresolved_rules == 0) break; } @@ -488,6 +490,7 @@ static int fib_nl_delrule(struct sk_buff *skb, struct nlmsghdr* nlh, void *arg) list_for_each_entry(tmp, &ops->rules_list, list) { if (rtnl_dereference(tmp->ctarget) == rule) { rcu_assign_pointer(tmp->ctarget, NULL); + tmp->unresolved = 1; ops->unresolved_rules++; } } -- 1.7.6 -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists