netfilter: xt_hashlimit: fix race that results in duplicated entries
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 24 Dec 2012 12:09:25 +0000 (13:09 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 26 Dec 2012 17:14:44 +0000 (18:14 +0100)
commit09181842b000344b1205801df3aa5b726c03cc62
tree49d9df6bbf35300fa3a8d1e3c4f0cbbbe07a383e
parent10db9069eb5c60195170a4119bdbcbce69a4945f
netfilter: xt_hashlimit: fix race that results in duplicated entries

Two packets may race to create the same entry in the hashtable,
double check if this packet lost race. This double checking only
happens in the path of the packet that creates the hashtable for
first time.

Note that, with this patch, no packet drops occur if the race happens.

Reported-by: Feng Gao <gfree.wind@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/xt_hashlimit.c