projects / platform / kernel / linux-stable.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 9bf0464) | patch
netfilter: ipset: autoload set type modules safely
authorJozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Tue, 17 Jan 2012 09:39:05 +0000 (10:39 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 17 Jan 2012 09:52:46 +0000 (10:52 +0100)
commit088067f4f14d6ee5c6a196b015a560cbe7744224
tree1be34b941c1671b70834212d2188f8ce6b1c1f45tree | snapshot
parent9bf04646b0b41c5438ed8a27c5f8dbe0ff40d756commit | diff
netfilter: ipset: autoload set type modules safely

Jan Engelhardt noticed when userspace requests a set type unknown
to the kernel, it can lead to a loop due to the unsafe type module
loading. The issue is fixed in this patch.

Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/ipset/ip_set_core.c diff | blob | history
Domain: System / Kernel;