diff options
| author | Jesper Dangaard Brouer <brouer@redhat.com> | 2013-12-16 17:09:41 +0100 |
|---|---|---|
| committer | Simon Horman <horms@verge.net.au> | 2013-12-27 12:29:54 +0900 |
| commit | db12cf27435356017e7ab375ef5e82a1cc749384 (patch) | |
| tree | a21542095f2c2b27ea1c6d7737512f4bfc280478 /net | |
| parent | 443d20fd188208aa4df2118ad49f9168e411016d (diff) | |
| download | kernel-common-db12cf27435356017e7ab375ef5e82a1cc749384.tar.gz kernel-common-db12cf27435356017e7ab375ef5e82a1cc749384.tar.bz2 kernel-common-db12cf27435356017e7ab375ef5e82a1cc749384.zip | |
netfilter: WARN about wrong usage of sequence number adjustments
Since commit 41d73ec053d2 (netfilter: nf_conntrack: make sequence
number adjustments usuable without NAT), the sequence number extension
is dynamically allocated.
Instead of dying, give a WARN splash, in case of wrong usage of the
seqadj code, e.g. when forgetting to allocate via nfct_seqadj_ext_add().
Wrong usage have been seen in the IPVS code path.
Signed-off-by: Jesper Dangaard Brouer <brouer@redhat.com>
Acked-by: Julian Anastasov <ja@ssi.bg>
Signed-off-by: Simon Horman <horms@verge.net.au>
Diffstat (limited to 'net')
| -rw-r--r-- | net/netfilter/nf_conntrack_seqadj.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/net/netfilter/nf_conntrack_seqadj.c b/net/netfilter/nf_conntrack_seqadj.c index 17c1bcb182c6..b2d38da67822 100644 --- a/net/netfilter/nf_conntrack_seqadj.c +++ b/net/netfilter/nf_conntrack_seqadj.c @@ -36,6 +36,11 @@ int nf_ct_seqadj_set(struct nf_conn *ct, enum ip_conntrack_info ctinfo, if (off == 0) return 0; + if (unlikely(!seqadj)) { + WARN(1, "Wrong seqadj usage, missing nfct_seqadj_ext_add()\n"); + return 0; + } + set_bit(IPS_SEQ_ADJUST_BIT, &ct->status); spin_lock_bh(&ct->lock); |