netfilter: nf_tables: use RCU-safe list insertion when replacing rules

The patch 5e94846 ("netfilter: nf_tables: add insert operation") did
not include RCU-safe list insertion when replacing rules.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
This commit is contained in:
Pablo Neira Ayuso 2014-06-10 10:53:00 +02:00
parent cd5f336f17
commit 5bc5c30765

View file

@ -1796,7 +1796,7 @@ static int nf_tables_newrule(struct sock *nlsk, struct sk_buff *skb,
goto err2; goto err2;
} }
nft_rule_disactivate_next(net, old_rule); nft_rule_disactivate_next(net, old_rule);
list_add_tail(&rule->list, &old_rule->list); list_add_tail_rcu(&rule->list, &old_rule->list);
} else { } else {
err = -ENOENT; err = -ENOENT;
goto err2; goto err2;