mbox

[quantal,sru,pull-request] fix for lp#1256988

Message ID 52AB69D8.9080709@canonical.com
State New
Headers show

Pull-request

git://kernel.ubuntu.com/arges/ubuntu-quantal.git lp1256988

Message

Chris J Arges Dec. 13, 2013, 8:11 p.m. UTC 
BugLink: http://bugs.launchpad.net/bugs/1256988

SRU Justification:

[Impact]
* When restoring an iptable in a network namespace, if the network
namespace is deleted the kernel crashes.

[Test Case]
$ sudo -s
# ip netns add foobar
# ip netns exec foobar iptables -A OUTPUT -m recent --rcheck --rsource
# ip netns del foobar

[Regression Potential]
* The following patches fix the issue:
665e205c1
32263dd1b

In addition this patch is required to fix a potential regression
introduced by the original fix:
https://git.kernel.org/cgit/linux/kernel/git/pablo/nf.git/commit/?id=b4ef4ce09308955d1aa54a289c0162607b3aa16c

Two are upstream linux patches, the last it still in the netfilter
upstream tree.

--

The following changes since commit e2f6a961ee77276feed33fd5d64effff490e8608:

  UBUNTU: Ubuntu-3.5.0-45.68 (2013-12-02 13:53:32 -0600)

are available in the git repository at:

  git://kernel.ubuntu.com/arges/ubuntu-quantal.git lp1256988

for you to fetch changes up to 7c83faf748cf7565dd841c91340b2c7222ef031e:

  netfilter: xt_hashlimit: fix proc entry leak in netns destroy path
(2013-12-13 13:55:33 -0600)

----------------------------------------------------------------
Sergey Popovich (1):
      netfilter: xt_hashlimit: fix proc entry leak in netns destroy path

Vitaly E. Lavrov (2):
      netfilter: xt_recent: fix namespace destroy path
      netfilter: xt_hashlimit: fix namespace destroy path

 net/netfilter/xt_hashlimit.c |   34 +++++++++++++++++++++++++++-------
 net/netfilter/xt_recent.c    |   20 ++++++++++++++++----
 2 files changed, 43 insertions(+), 11 deletions(-)

Comments

Tim Gardner Dec. 13, 2013, 8:52 p.m. UTC | #1
Seth Forshee Dec. 13, 2013, 9:10 p.m. UTC | #2
Tim Gardner Dec. 14, 2013, 1:28 p.m. UTC | #3