mbox

[precise,sru,pull-request] fix for lp#1256988

Message ID 52AB69D5.8030501@canonical.com
State New
Headers show

Pull-request

git://kernel.ubuntu.com/arges/ubuntu-precise.git lp1256988

Message

Chris J Arges Dec. 13, 2013, 8:11 p.m. UTC 
BugLink: http://bugs.launchpad.net/bugs/1256988

SRU Justification:

[Impact]
* When restoring an iptable in a network namespace, if the network
namespace is deleted the kernel crashes.

[Test Case]
$ sudo -s
# ip netns add foobar
# ip netns exec foobar iptables -A OUTPUT -m recent --rcheck --rsource
# ip netns del foobar

[Regression Potential]
* The following patches fix the issue:
665e205c1
32263dd1b

In addition this patch is required to fix a potential regression
introduced by the original fix:
https://git.kernel.org/cgit/linux/kernel/git/pablo/nf.git/commit/?id=b4ef4ce09308955d1aa54a289c0162607b3aa16c

Two are upstream linux patches, the last it still in the netfilter
upstream tree.

--

The following changes since commit 0ce353fefc9508a7a24b9b57370bf6732b692fbc:

  UBUNTU: [Config] Enable CONFIG_VT6656 (2013-12-11 08:26:01 -0500)

are available in the git repository at:

  git://kernel.ubuntu.com/arges/ubuntu-precise.git lp1256988

for you to fetch changes up to 97b78c520f82b0616929e4f6ec78442bbeae4efe:

  netfilter: xt_hashlimit: fix proc entry leak in netns destroy path
(2013-12-13 13:46:33 -0600)

----------------------------------------------------------------
Sergey Popovich (1):
      netfilter: xt_hashlimit: fix proc entry leak in netns destroy path

Vitaly E. Lavrov (2):
      netfilter: xt_recent: fix namespace destroy path
      netfilter: xt_hashlimit: fix namespace destroy path

 net/netfilter/xt_hashlimit.c |   34 +++++++++++++++++++++++++++-------
 net/netfilter/xt_recent.c    |   20 ++++++++++++++++----
 2 files changed, 43 insertions(+), 11 deletions(-)

Comments

Tim Gardner Dec. 13, 2013, 8:47 p.m. UTC | #1 
Seems quite testable
Seth Forshee Dec. 13, 2013, 9:10 p.m. UTC | #2
Tim Gardner Dec. 14, 2013, 1:27 p.m. UTC | #3