netdev - [PATCH net 0/2] net: bpfilter: fix two bugs in bpfilter

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date:   Wed, 12 Dec 2018 10:19:09 +0900
From:   Taehee Yoo <ap420073@...il.com>
To:     davem@...emloft.net, netdev@...r.kernel.org
Cc:     daniel@...earbox.net, ast@...nel.org, ap420073@...il.com
Subject: [PATCH net 0/2] net: bpfilter: fix two bugs in bpfilter

This patches fix two bugs in bpfilter which are related in
iptables command.

First patch adds error handling code for bpfilter_umh.
When error occurred in bpfilter_umh, bpfilter is stopped.
then it never be restarted. it makes failing iptables command.
This patch adds restart bpfilter_umh routine.

Second patch ensures that bpfilter.ko module will not removed while
it's being used.
bpfilter.ko is not protected by lock or module reference counter.
Therefore that can be removed while module is being used.
In order to protect that, mutex is used.

Taehee Yoo (2):
  net: bpfilter: restart bpfilter_umh when error occurred
  net: bpfilter: disallow to remove bpfilter module while being used

 include/linux/bpfilter.h         | 16 +++++++++++---
 net/bpfilter/bpfilter_kern.c     | 35 +++++++++++++++--------------
 net/bpfilter/bpfilter_umh_blob.S |  2 +-
 net/ipv4/bpfilter/sockopt.c      | 38 +++++++++++++++++++++++---------
 4 files changed, 60 insertions(+), 31 deletions(-)

-- 
2.17.1