Hans Schillstrom 8cdb46da06 netfilter: log: netns NULL ptr bug when calling from conntrack ...

Since (69b34fb netfilter: xt_LOG: add net namespace support
for xt_LOG), we hit this:

[ 4224.708977] BUG: unable to handle kernel NULL pointer dereference at 0000000000000388
[ 4224.709074] IP: [<ffffffff8147f699>] ipt_log_packet+0x29/0x270

when callling log functions from conntrack both in and out
are NULL i.e. the net pointer is invalid.

Adding struct net *net in call to nf_logfn() will secure that
there always is a vaild net ptr.

Reported as netfilter's bugzilla bug 818:
https://bugzilla.netfilter.org/show_bug.cgi?id=818

Reported-by: Ronald <[email protected]>
Signed-off-by: Hans Schillstrom <[email protected]>
Signed-off-by: Pablo Neira Ayuso <[email protected]>

2013-05-15 14:11:07 +02:00

..

ipv4

…

ipv6

…

nf_conntrack_acct.h

netfilter: nf_ct_acct: move initialization out of pernet_operations

2013-01-23 12:55:29 +01:00

nf_conntrack_core.h

netfilter: nf_conntrack: speed up module removal path if netns in use

2013-03-19 17:08:31 +01:00

nf_conntrack_ecache.h

netfilter: nf_ct_ecache: move initialization out of pernet_operations

2013-01-23 12:55:50 +01:00

nf_conntrack_expect.h

netfilter: rename netlink related "pid" variables to "portid"

2013-04-19 14:58:36 -04:00

nf_conntrack_extend.h

netfilter: add connlabel conntrack extension

2013-01-18 00:28:15 +01:00

nf_conntrack_helper.h

netfilter: nf_ct_helper: better logging for dropped packets

2013-02-19 02:48:05 +01:00

nf_conntrack_l3proto.h

netfilter: nf_conntrack: refactor l3proto support for netns

2013-01-23 14:39:20 +01:00

nf_conntrack_l4proto.h

netfilter: nf_conntrack: refactor l4proto support for netns

2013-01-23 14:40:53 +01:00

nf_conntrack_labels.h

netfilter: nf_ct_labels: move initialization out of pernet_operations

2013-01-23 12:56:23 +01:00

nf_conntrack_timeout.h

netfilter: nf_ct_timeout: move initialization out of pernet_operations

2013-01-23 12:56:02 +01:00

nf_conntrack_timestamp.h

netfilter: nf_ct_tstamp: move initialization out of pernet_operations

2013-01-23 12:55:39 +01:00

nf_conntrack_tuple.h

netfilter: nf_nat: export NAT definitions to userspace

2011-12-23 14:36:43 +01:00

nf_conntrack_zones.h

…

nf_conntrack.h

netfilter: rename netlink related "pid" variables to "portid"

2013-04-19 14:58:36 -04:00

nf_log.h

netfilter: log: netns NULL ptr bug when calling from conntrack

2013-05-15 14:11:07 +02:00

nf_nat_core.h

netfilter: add protocol independent NAT core

2012-08-30 03:00:14 +02:00

nf_nat_helper.h

netfilter: nf_nat: add protoff argument to packet mangling functions

2012-08-30 03:00:13 +02:00

nf_nat_l3proto.h

netfilter: ipv6: add IPv6 NAT support

2012-08-30 03:00:17 +02:00

nf_nat_l4proto.h

netfilter: ipv6: add IPv6 NAT support

2012-08-30 03:00:17 +02:00

nf_nat.h

netfilter: nf_nat: Handle routing changes in MASQUERADE target

2012-12-03 15:14:20 +01:00

nf_queue.h

netfilter: move skb_gso_segment into nfnetlink_queue module

2013-04-29 20:09:05 +02:00

nf_tproxy_core.h

soreuseport: TCP/IPv6 implementation

2013-01-23 13:44:01 -05:00

nfnetlink_log.h

netfilter: log: netns NULL ptr bug when calling from conntrack

2013-05-15 14:11:07 +02:00

nfnetlink_queue.h

netfilter: fix missing symbols if CONFIG_NETFILTER_NETLINK_QUEUE_CT unset

2012-06-18 21:09:17 -07:00

xt_log.h

netfilter: xt_LOG: don't use xchg() for simple assignment

2012-03-26 14:00:28 +02:00

xt_rateest.h

…