netfilter: restart search if moved to other chain
authorFlorian Westphal <fw@strlen.de>
Thu, 25 Aug 2016 13:33:29 +0000 (15:33 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 30 Aug 2016 09:43:08 +0000 (11:43 +0200)
commit95a8d19f28e6b29377a880c6264391a62e07fccc
tree81fc67ab9b30fc35ed1d22116e7c5905e3018ad2
parent7073b16f3dff83df1b0794262386abb869e8d180
netfilter: restart search if moved to other chain

In case nf_conntrack_tuple_taken did not find a conflicting entry
check that all entries in this hash slot were tested and restart
in case an entry was moved to another chain.

Reported-by: Eric Dumazet <edumazet@google.com>
Fixes: ea781f197d6a ("netfilter: nf_conntrack: use SLAB_DESTROY_BY_RCU and get rid of call_rcu()")
Signed-off-by: Florian Westphal <fw@strlen.de>
Acked-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_conntrack_core.c