Florian Westphal 1922476bee netfilter: ctnetlink: don't use conntrack/expect object addresses as id ...

commit 3c79107631 upstream.

else, we leak the addresses to userspace via ctnetlink events
and dumps.

Compute an ID on demand based on the immutable parts of nf_conn struct.

Another advantage compared to using an address is that there is no
immediate re-use of the same ID in case the conntrack entry is freed and
reallocated again immediately.

Fixes: 3583240249 ("[NETFILTER]: nf_conntrack_expect: kill unique ID")
Fixes: 7f85f91472 ("[NETFILTER]: nf_conntrack: kill unique ID")
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Ben Hutchings <ben.hutchings@codethink.co.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2019-08-25 10:51:42 +02:00

..

acpi

ACPICA: Reference Counts: increase max to 0x4000 for large servers

2019-03-19 13:14:07 +01:00

asm-generic

bug.h: work around GCC PR82365 in BUG()

2019-07-10 09:55:44 +02:00

clocksource

clocksource/drivers/sp804: Convert init function to return error

2016-06-28 10:19:30 +02:00

crypto

crypto: vmac - separate tfm and request context

2018-08-17 20:59:29 +02:00

drm

drm: disable uncached DMA optimization for ARM and arm64

2019-03-13 14:05:01 -07:00

dt-bindings

dt-bindings: clock: mediatek: add binding for fixed-factor clock axisel_d4

2018-04-24 09:34:14 +02:00

keys

KEYS: user: Align the payload buffer

2019-02-27 10:07:00 +01:00

kvm

arm/arm64: KVM: Add PSCI version selection API

2018-05-09 09:50:19 +02:00

linux

inet: switch IP ID generator to siphash

2019-08-25 10:51:42 +02:00

math-emu

…

media

media: v4l: event: Prevent freeing event subscriptions while accessed

2018-10-03 17:01:55 -07:00

memory

…

misc

cxl: Add cxl_check_and_switch_mode() API to switch bi-modal cards

2016-07-14 20:28:11 +10:00

net

netfilter: ctnetlink: don't use conntrack/expect object addresses as id

2019-08-25 10:51:42 +02:00

pcmcia

…

ras

tracing, RAS: Cleanup on __get_str() usage

2016-07-15 15:51:16 -04:00

rdma

IB/core: Make testing MR flags for writability a static inline function

2018-08-15 18:14:43 +02:00

rxrpc

rxrpc: Add tracepoint for ACK proposal

2016-09-23 15:49:19 +01:00

scsi

scsi: fcoe: Embed fc_rport_priv in fcoe_rport structure

2019-08-11 12:22:12 +02:00

soc

memory: tegra: Apply interrupts mask per SoC

2018-08-03 07:55:24 +02:00

sound

ALSA: compress: Fix regression on compressed capture streams

2019-08-25 10:51:26 +02:00

target

target: Avoid early CMD_T_PRE_EXECUTE failures during ABORT_TASK

2018-01-17 09:38:54 +01:00

trace

ext4: force inode writes when nfsd calls commit_metadata()

2019-01-09 16:16:44 +01:00

uapi

uapi linux/coda_psdev.h: move upc_req definition from uapi to kernel side headers

2019-08-06 18:29:38 +02:00

video

udlfb: set optimal write delay

2018-09-09 20:01:25 +02:00

xen

swiotlb-xen: implement xen_swiotlb_dma_mmap callback

2017-10-05 09:44:05 +02:00

Kbuild

…