summaryrefslogtreecommitdiffstats
path: root/iptables/xtables-config-syntax.l
diff options
context:
space:
mode:
authorPablo Neira Ayuso <pablo@netfilter.org>2019-05-19 18:58:40 +0200
committerPablo Neira Ayuso <pablo@netfilter.org>2019-05-20 20:56:47 +0200
commitf6ad231d698c7c091371264d8d1881cbb9cf0ba1 (patch)
tree9d3d5edbf6e58189566aab376f7ad9112cf6e167 /iptables/xtables-config-syntax.l
parentab1cd3b510fa5d5642b8698c5bd5c125b53ff7c7 (diff)
nft: keep original cache in case of ERESTART
Phil Sutter says: "The problem is that data in h->obj_list potentially sits in cache, too. At least rules have to be there so insert with index works correctly. If the cache is flushed before regenerating the batch, use-after-free occurs which crashes the program." This patch keeps around the original cache until we have refreshed the batch. Fixes: 862818ac3a0de ("xtables: add and use nft_build_cache") Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'iptables/xtables-config-syntax.l')
0 files changed, 0 insertions, 0 deletions