[Devel] [PATCH RH7 2/2] ms/netfilter: ipset: Correct rcu_dereference() call in ip_set_put_comment()

Vasily Averin vvs at virtuozzo.com
Tue Dec 1 11:43:23 MSK 2020


From: Jozsef Kadlecsik <kadlec at blackhole.kfki.hu>

The function is called when rcu_read_lock() is held and not
when rcu_read_lock_bh() is held.

Signed-off-by: Jozsef Kadlecsik <kadlec at blackhole.kfki.hu>
Signed-off-by: Pablo Neira Ayuso <pablo at netfilter.org>

(cherry-picked from commit 17b8b74c0f8dbf9b9e3301f9ca5b65dd1c079951)
https://jira.sw.ru/browse/PSBM-123063
Signed-off-by: Vasily Averin <vvs at virtuozzo.com>
---
 include/linux/netfilter/ipset/ip_set_comment.h | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/include/linux/netfilter/ipset/ip_set_comment.h b/include/linux/netfilter/ipset/ip_set_comment.h
index 8e2bab1..70877f8d 100644
--- a/include/linux/netfilter/ipset/ip_set_comment.h
+++ b/include/linux/netfilter/ipset/ip_set_comment.h
@@ -43,11 +43,11 @@ ip_set_init_comment(struct ip_set *set, struct ip_set_comment *comment,
 	rcu_assign_pointer(comment->c, c);
 }
 
-/* Used only when dumping a set, protected by rcu_read_lock_bh() */
+/* Used only when dumping a set, protected by rcu_read_lock() */
 static inline int
 ip_set_put_comment(struct sk_buff *skb, const struct ip_set_comment *comment)
 {
-	struct ip_set_comment_rcu *c = rcu_dereference_bh(comment->c);
+	struct ip_set_comment_rcu *c = rcu_dereference(comment->c);
 
 	if (!c)
 		return 0;
-- 
1.8.3.1



More information about the Devel mailing list