Pan Bian 708abf74dd netfilter: ipset: do not call ipset_nest_end after nla_nest_cancel ...

In the error handling block, nla_nest_cancel(skb, atd) is called to
cancel the nest operation. But then, ipset_nest_end(skb, atd) is
unexpected called to end the nest operation. This patch calls the
ipset_nest_end only on the branch that nla_nest_cancel is not called.

Fixes: 45040978c899 ("netfilter: ipset: Fix set:list type crash when flush/dump set in parallel")
Signed-off-by: Pan Bian <bianpan2016@163.com>
Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

2018-12-13 00:55:50 +01:00

..

ip_set_bitmap_gen.h

netfilter: ipset: Fix "don't update counters" mode when counters used at the matching

2018-01-08 18:11:12 +01:00

ip_set_bitmap_ip.c

netfilter: ipset: use swap macro instead of _manually_ swapping values

2018-01-08 18:11:11 +01:00

ip_set_bitmap_ipmac.c

netfilter: ipset: use swap macro instead of _manually_ swapping values

2018-01-08 18:11:11 +01:00

ip_set_bitmap_port.c

netfilter: ipset: use swap macro instead of _manually_ swapping values

2018-01-08 18:11:11 +01:00

ip_set_core.c

netfilter: ipset: Fix calling ip_set() macro at dumping

2018-11-03 13:28:01 +01:00

ip_set_getport.c

sctp: remove the typedef sctp_sctphdr_t

2017-07-01 09:08:41 -07:00

ip_set_hash_gen.h

netfilter: Replace spin_is_locked() with lockdep

2018-10-16 10:01:47 +02:00

ip_set_hash_ip.c

netfilter: ipset: Fix adding an IPv4 range containing more than 2^31 addresses

2017-09-26 20:15:04 +02:00

ip_set_hash_ipmac.c

netfilter: ipset: hash: fix boolreturn.cocci warnings

2016-11-10 13:28:50 +01:00

ip_set_hash_ipmark.c

netfilter: ipset: Fix adding an IPv4 range containing more than 2^31 addresses

2017-09-26 20:15:04 +02:00

ip_set_hash_ipport.c

netfilter: ipset: Fix adding an IPv4 range containing more than 2^31 addresses

2017-09-26 20:15:04 +02:00

ip_set_hash_ipportip.c

netfilter: ipset: Fix adding an IPv4 range containing more than 2^31 addresses

2017-09-26 20:15:04 +02:00

ip_set_hash_ipportnet.c

netfilter: ipset: Fix wraparound in hash:*net* types

2018-01-31 14:52:09 +01:00

ip_set_hash_mac.c

netfilter: ipset: Use is_zero_ether_addr instead of static and memcmp

2018-03-30 12:20:44 +02:00

ip_set_hash_net.c

netfilter: ipset: Fix wraparound in hash:*net* types

2018-01-31 14:52:09 +01:00

ip_set_hash_netiface.c

netfilter: ipset: Fix wraparound in hash:*net* types

2018-01-31 14:52:09 +01:00

ip_set_hash_netnet.c

netfilter: ipset: Fix wraparound in hash:*net* types

2018-01-31 14:52:09 +01:00

ip_set_hash_netport.c

netfilter: ipset: Fix wraparound in hash:*net* types

2018-01-31 14:52:09 +01:00

ip_set_hash_netportnet.c

netfilter: ipset: actually allow allowable CIDR 0 in hash:net,port,net

2018-11-01 00:29:43 +01:00

ip_set_list_set.c

netfilter: ipset: do not call ipset_nest_end after nla_nest_cancel

2018-12-13 00:55:50 +01:00

Kconfig

netfilter: ipset: hash:ipmac type support added to ipset

2016-11-10 13:28:49 +01:00

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

pfxlen.c

netfilter: ipset: deduplicate prefixlen maps

2017-10-04 16:19:06 +02:00