linux-kernel - Re: [PATCH NETFILTER] netfilter: nfnetlink: suspicious RCU usage in ctnetlink_dump

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <8a892a24-62f2-fb43-aad6-62ada13143e7@virtuozzo.com>
Date:   Wed, 30 Jun 2021 15:30:30 +0300
From:   Vasily Averin <vvs@...tuozzo.com>
To:     Pablo Neira Ayuso <pablo@...filter.org>
Cc:     Florian Westphal <fw@...len.de>,
        Jozsef Kadlecsik <kadlec@...filter.org>,
        Taehee Yoo <ap420073@...il.com>, Julian Anastasov <ja@....bg>,
        netfilter-devel@...r.kernel.org, coreteam@...filter.org,
        linux-kernel@...r.kernel.org
Subject: Re: [PATCH NETFILTER] netfilter: nfnetlink: suspicious RCU usage in
 ctnetlink_dump_helpinfo

On 6/30/21 3:09 PM, Pablo Neira Ayuso wrote:
> 
> On Wed, Jun 30, 2021 at 11:49:49AM +0200, Florian Westphal wrote:
>> Vasily Averin <vvs@...tuozzo.com> wrote:
>>> Two patches listed below removed ctnetlink_dump_helpinfo call from under
>>> rcu_read_lock. Now its rcu_dereference generates following warning:
>>> =============================
>>> WARNING: suspicious RCU usage
>>> 5.13.0+ #5 Not tainted
>>> -----------------------------
>>> net/netfilter/nf_conntrack_netlink.c:221 suspicious rcu_dereference_check() usage!
>>
>> Reviewed-by: Florian Westphal <fw@...len.de>
> 
> I don't see this patch in netfilter's patchwork nor in
> netfilter-devel@...r.kernel.org
> 
> Where did they go?

My original letter was graylisted.

"
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

coreteam@...filter.org
host mail.netfilter.org [217.70.188.207]
SMTP error from remote mail server after RCPT TO:<coreteam@...filter.org>:
450 4.2.0 <coreteam@...filter.org>: Recipient address rejected:
Greylisted for 60 seconds: retry timeout exceeded
kadlec@...filter.org
host mail.netfilter.org [217.70.188.207]
SMTP error from remote mail server after RCPT TO:<kadlec@...filter.org>:
450 4.2.0 <kadlec@...filter.org>: Recipient address rejected:
Greylisted for 60 seconds: retry timeout exceeded
pablo@...filter.org
host mail.netfilter.org [217.70.188.207]
SMTP error from remote mail server after RCPT TO:<pablo@...filter.org>:
450 4.2.0 <pablo@...filter.org>: Recipient address rejected:
Greylisted for 60 seconds: retry timeout exceeded
linux-kernel@...r.kernel.org
host vger.kernel.org [23.128.96.18]
SMTP error from remote mail server after RCPT TO:<linux-kernel@...r.kernel.org>:
451 4.7.1 Hello [185.231.240.75], for recipient address <linux-kernel@...r.kernel.org> the policy analysis reported:
Greylisted, see http://postgrey.schweikert.ch/help/vger.kernel.org.html:
retry timeout exceeded
netfilter-devel@...r.kernel.org
host vger.kernel.org [23.128.96.18]
SMTP error from remote mail server after RCPT TO:<netfilter-devel@...r.kernel.org>:
451 4.7.1 Hello [185.231.240.75], for recipient address <netfilter-devel@...r.kernel.org> the policy analysis reported:
Greylisted, see http://postgrey.schweikert.ch/help/vger.kernel.org.html:
retry timeout exceeded
"
I'm expect it will be re-send in few hours.
othrevise I'll resend it once again via another mail server.

Thank you,
	Vasily Averin