netfilter: nfnetlink: use original skbuff when acking batches
Sincebd678e09dc
("netfilter: nfnetlink: fix splat due to incorrect socket memory accounting in skbuff clones"), we don't manually attach the sk to the skbuff clone anymore, so we have to use the original skbuff from netlink_ack() which needs to access the sk pointer. Fixes:bd678e09dc
("netfilter: nfnetlink: fix splat due to incorrect socket memory accounting in skbuff clones") Reported-by: Dmitry Vyukov <dvyukov@google.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
This commit is contained in:
parent
d93c6258ee
commit
7c7bdf3599
|
@ -311,14 +311,14 @@ replay:
|
|||
#endif
|
||||
{
|
||||
nfnl_unlock(subsys_id);
|
||||
netlink_ack(skb, nlh, -EOPNOTSUPP);
|
||||
netlink_ack(oskb, nlh, -EOPNOTSUPP);
|
||||
return kfree_skb(skb);
|
||||
}
|
||||
}
|
||||
|
||||
if (!ss->commit || !ss->abort) {
|
||||
nfnl_unlock(subsys_id);
|
||||
netlink_ack(skb, nlh, -EOPNOTSUPP);
|
||||
netlink_ack(oskb, nlh, -EOPNOTSUPP);
|
||||
return kfree_skb(skb);
|
||||
}
|
||||
|
||||
|
@ -406,7 +406,7 @@ ack:
|
|||
* pointing to the batch header.
|
||||
*/
|
||||
nfnl_err_reset(&err_list);
|
||||
netlink_ack(skb, nlmsg_hdr(oskb), -ENOMEM);
|
||||
netlink_ack(oskb, nlmsg_hdr(oskb), -ENOMEM);
|
||||
status |= NFNL_BATCH_FAILURE;
|
||||
goto done;
|
||||
}
|
||||
|
|
Loading…
Reference in New Issue