netfilter: conntrack: Fix data-races around ct mark
nf_conn:mark can be read from and written to in parallel. Use READ_ONCE()/WRITE_ONCE() for reads and writes to prevent unwanted compiler optimizations. Fixes: 1da177e4 ("Linux-2.6.12-rc2") Signed-off-by:Daniel Xu <dxu@dxuuu.xyz> Signed-off-by:
Pablo Neira Ayuso <pablo@netfilter.org>
Showing
- net/core/flow_dissector.c 1 addition, 1 deletionnet/core/flow_dissector.c
- net/ipv4/netfilter/ipt_CLUSTERIP.c 2 additions, 2 deletionsnet/ipv4/netfilter/ipt_CLUSTERIP.c
- net/netfilter/nf_conntrack_core.c 1 addition, 1 deletionnet/netfilter/nf_conntrack_core.c
- net/netfilter/nf_conntrack_netlink.c 14 additions, 10 deletionsnet/netfilter/nf_conntrack_netlink.c
- net/netfilter/nf_conntrack_standalone.c 1 addition, 1 deletionnet/netfilter/nf_conntrack_standalone.c
- net/netfilter/nft_ct.c 3 additions, 3 deletionsnet/netfilter/nft_ct.c
- net/netfilter/xt_connmark.c 10 additions, 8 deletionsnet/netfilter/xt_connmark.c
- net/openvswitch/conntrack.c 4 additions, 4 deletionsnet/openvswitch/conntrack.c
- net/sched/act_connmark.c 2 additions, 2 deletionsnet/sched/act_connmark.c
- net/sched/act_ct.c 4 additions, 4 deletionsnet/sched/act_ct.c
- net/sched/act_ctinfo.c 3 additions, 3 deletionsnet/sched/act_ctinfo.c
Loading