diff options
author | Pablo Neira Ayuso <pablo@netfilter.org> | 2012-09-05 18:24:55 +0200 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2012-09-05 18:35:51 +0200 |
commit | 00545bec9412d130c77f72a08d6c8b6ad21d4a1e (patch) | |
tree | 2ebfa8d7cb607d032cb719753ec47005ee4159d9 /security | |
parent | 1e9f0207d3e63fab7a0f8a0e532bdc73ea850baf (diff) | |
download | linux-3.10-00545bec9412d130c77f72a08d6c8b6ad21d4a1e.tar.gz linux-3.10-00545bec9412d130c77f72a08d6c8b6ad21d4a1e.tar.bz2 linux-3.10-00545bec9412d130c77f72a08d6c8b6ad21d4a1e.zip |
netfilter: fix crash during boot if NAT has been compiled built-in
(c7232c9 netfilter: add protocol independent NAT core) introduced a
problem that leads to crashing during boot due to NULL pointer
dereference. It seems that xt_nat calls xt_register_target() before
xt_init():
net/netfilter/x_tables.c:static struct xt_af *xt; is NULL and we crash on
xt_register_target(struct xt_target *target)
{
u_int8_t af = target->family;
int ret;
ret = mutex_lock_interruptible(&xt[af].mutex);
...
Fix this by changing the linking order, to make sure that x_tables
comes before xt_nat.
Reported-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'security')
0 files changed, 0 insertions, 0 deletions