]> git.itanic.dy.fi Git - linux-stable/commit
projects / linux-stable / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3e673b2) | patch
netfilter: nf_tables: fix register ordering
authorFlorian Westphal <fw@strlen.de>
Thu, 2 Aug 2018 19:44:40 +0000 (21:44 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 16 Aug 2018 17:37:02 +0000 (19:37 +0200)
commitd209df3e7f7002d9099fdb0f6df0f972b4386a63
treeb2ded0dc8be12f0048188bbf2b0a80f01fbb353atree | snapshot
parent3e673b23b541b8e7f773b2d378d6eb99831741cdcommit | diff
netfilter: nf_tables: fix register ordering

We must register nfnetlink ops last, as that exposes nf_tables to
userspace.  Without this, we could theoretically get nfnetlink request
before net->nft state has been initialized.

Fixes: 99633ab29b213 ("netfilter: nf_tables: complete net namespace support")
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/net/netfilter/nf_tables.h diff | blob | history
net/netfilter/nf_tables_api.c diff | blob | history
net/netfilter/nft_chain_filter.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.