Files
linux/net/netfilter
Florian Westphal 123534dbd4 netfilter: nf_tables: don't allow to rename to already-pending name
[ Upstream commit c6cc94df65 ]

Its possible to rename two chains to the same name in one
transaction:

nft add chain t c1
nft add chain t c2
nft 'rename chain t c1 c3;rename chain t c2 c3'

This creates two chains named 'c3'.

Appears to be harmless, both chains can still be deleted both
by name or handle, but, nevertheless, its a bug.

Walk transaction log and also compare vs. the pending renames.

Both chains can still be deleted, but nevertheless it is a bug as
we don't allow to create chains with identical names, so we should
prevent this from happening-by-rename too.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <alexander.levin@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2018-09-05 09:26:27 +02:00
..
2017-05-02 10:16:04 -04:00
2010-07-15 17:20:46 +02:00
2011-07-01 16:11:15 -07:00
2011-07-01 16:11:15 -07:00
2017-04-15 11:51:33 +02:00
2015-05-14 13:00:27 +02:00
2016-12-25 17:21:22 +01:00