2006-11-29 22:01:36

by Chris Wright

[permalink] [raw]
Subject: [patch 03/23] NETFILTER: ip_tables: compat error way cleanup

-stable review patch. If anyone has any objections, please let us know.
------------------

From: Patrick McHardy <[email protected]>

This patch adds forgotten compat_flush_offset() call to error way of
translate_compat_table(). May lead to table corruption on the next
compat_do_replace().

Signed-off-by: Vasily Averin <[email protected]>
Acked-by: Dmitry Mishin <[email protected]>
Acked-by: Kirill Korotaev <[email protected]>
Signed-off-by: Patrick McHardy <[email protected]>
Signed-off-by: David S. Miller <[email protected]>
Signed-off-by: Chris Wright <[email protected]>

---
commit efb1447a67abac93048ad7af0c59cd9b5a9177a6
tree 9d56a6e758a3ad0e617f2527ac4b4efdeba5b64a
parent 4410392a8258fd972fc08a336278b14c82b2774f
author Patrick McHardy <[email protected]> Fri, 17 Nov 2006 06:22:39 +0100
committer Patrick McHardy <[email protected]> Fri, 17 Nov 2006 06:22:39 +0100

net/ipv4/netfilter/ip_tables.c | 1 +
1 file changed, 1 insertion(+)

--- linux-2.6.18.4.orig/net/ipv4/netfilter/ip_tables.c
+++ linux-2.6.18.4/net/ipv4/netfilter/ip_tables.c
@@ -1775,6 +1775,7 @@ free_newinfo:
out:
return ret;
out_unlock:
+ compat_flush_offsets();
xt_compat_unlock(AF_INET);
goto out;
}

--