[nf-next PATCH v3 0/4] Address Sashiko review of NAT hook dump code
Phil Sutter <[email protected]>
| Newsgroups | gmane.comp.security.firewalls.netfilter.devel |
|---|---|
| Message-ID | <[email protected]> |
Changes since v2:
- Drop patch 1 again. Fixing nfnl_hook_dump's broken NLM_F_DUMP_INTR
flag setting in corner-cases is out of scope of this series and should
be solved in a more elegant way in nfnetlink itself.
Changes since v1:
- New patch 1
- Fixed three aspects of patch 3
- Fixed two issues of patch 5
Patch 1 is mere preparation to add the missing case handling to
nfnl_hook_dump_nat().
Patch 2 fixes for missing READ_ONCE() calls when addressing hook ops
array elements.
Patch 3 adds missing multipart dump support to nfnl_hook_dump_nat.
Patch 4 adds code to detect and mitigate concurrent hook updates while
amidst a multipart dump to nfnl_hook_dump_nat.
Link: https://sashiko.dev/#/patchset/20260702105003.13550-2-fw%40strlen.de
Phil Sutter (4):
netfilter: nfnetlink_hook: Pass cb object to nfnl_hook_dump_nat()
netfilter: nfnetlink_hook: Address hook ops using READ_ONCE()
netfilter: nfnetlink_hook: Handle multipart NAT hook dumps
netfilter: nfnetlink_hook: Fix for concurrent NAT hooks dump and
change
net/netfilter/nfnetlink_hook.c | 48 ++++++++++++++++++++++++----------
1 file changed, 34 insertions(+), 14 deletions(-)
--
2.54.0