Pablo Neira Ayuso 8837ba3e58 netfilter: nf_tables: split async and sync catchall in two functions ... list_for_each_entry_safe() does not work for the async case which runs under RCU, therefore, split GC logic for catchall in two functions instead, one for each of the sync and async GC variants. The catchall sync GC variant never sees a _DEAD bit set on ever, thus, this handling is removed in such case, moreover, allocate GC sync batch via GFP_KERNEL. Fixes: 93995bf4af ("netfilter: nf_tables: remove catchall element in GC sync path") Reported-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2023-11-14 16:16:21 +01:00
..
ipset	netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test	2023-11-14 16:16:21 +01:00
ipvs	ipvs: add missing module descriptions	2023-11-08 13:52:33 +01:00
core.c	netfilter: make nftables drops visible in net dropmonitor	2023-10-18 10:26:43 +02:00
Kconfig
Makefile
nf_bpf_link.c
nf_conncount.c
nf_conntrack_acct.c
nf_conntrack_amanda.c
nf_conntrack_bpf.c	bpf: Add __bpf_kfunc_{start,end}_defs macros	2023-11-01 22:33:53 -07:00
nf_conntrack_broadcast.c	netfilter: add missing module descriptions	2023-11-08 13:52:32 +01:00
nf_conntrack_core.c	netfilter: conntrack: convert nf_conntrack_update to netfilter verdicts	2023-10-18 10:26:43 +02:00
nf_conntrack_ecache.c
nf_conntrack_expect.c
nf_conntrack_extend.c	netfilter: conntrack: fix extension size table	2023-09-13 21:57:50 +02:00
nf_conntrack_ftp.c
nf_conntrack_h323_asn1.c
nf_conntrack_h323_main.c
nf_conntrack_h323_types.c
nf_conntrack_helper.c	netfilter: conntrack: simplify nf_conntrack_alter_reply	2023-10-10 16:34:28 +02:00
nf_conntrack_irc.c
nf_conntrack_labels.c	netfilter: conntrack: switch connlabels to atomic_t	2023-10-24 13:16:30 +02:00
nf_conntrack_netbios_ns.c
nf_conntrack_netlink.c	netfilter: add missing module descriptions	2023-11-08 13:52:32 +01:00
nf_conntrack_ovs.c
nf_conntrack_pptp.c
nf_conntrack_proto.c	netfilter: add missing module descriptions	2023-11-08 13:52:32 +01:00
nf_conntrack_proto_dccp.c
nf_conntrack_proto_generic.c
nf_conntrack_proto_gre.c
nf_conntrack_proto_icmp.c
nf_conntrack_proto_icmpv6.c
nf_conntrack_proto_sctp.c	netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp	2023-10-04 14:12:01 +02:00
nf_conntrack_proto_tcp.c	netfilter: conntrack: prefer tcp_error_log to pr_debug	2023-10-10 16:34:28 +02:00
nf_conntrack_proto_udp.c
nf_conntrack_sane.c
nf_conntrack_seqadj.c
nf_conntrack_sip.c
nf_conntrack_snmp.c
nf_conntrack_standalone.c
nf_conntrack_tftp.c
nf_conntrack_timeout.c
nf_conntrack_timestamp.c
nf_dup_netdev.c
nf_flow_table_core.c	netfilter: flowtable: GC pushes back packets to classic path	2023-10-25 11:35:46 +02:00
nf_flow_table_inet.c
nf_flow_table_ip.c
nf_flow_table_offload.c
nf_flow_table_procfs.c
nf_hooks_lwtunnel.c
nf_internals.h
nf_log.c
nf_log_syslog.c
nf_nat_amanda.c
nf_nat_bpf.c	bpf: Add __bpf_kfunc_{start,end}_defs macros	2023-11-01 22:33:53 -07:00
nf_nat_core.c	netfilter: add missing module descriptions	2023-11-08 13:52:32 +01:00
nf_nat_ftp.c
nf_nat_helper.c
nf_nat_irc.c
nf_nat_masquerade.c
nf_nat_ovs.c
nf_nat_proto.c	ipsec-next-2023-10-28	2023-10-30 14:36:57 -07:00
nf_nat_redirect.c	netfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses	2023-11-08 16:40:30 +01:00
nf_nat_sip.c
nf_nat_tftp.c
nf_queue.c
nf_sockopt.c
nf_synproxy_core.c	tcp: introduce tcp_clock_ms()	2023-10-23 09:35:01 +01:00
nf_tables_api.c	netfilter: nf_tables: split async and sync catchall in two functions	2023-11-14 16:16:21 +01:00
nf_tables_core.c	netfilter: make nftables drops visible in net dropmonitor	2023-10-18 10:26:43 +02:00
nf_tables_offload.c
nf_tables_trace.c	netfilter: nf_tables: mask out non-verdict bits when checking return value	2023-10-18 10:26:43 +02:00
nfnetlink.c
nfnetlink_acct.c
nfnetlink_cthelper.c
nfnetlink_cttimeout.c
nfnetlink_hook.c
nfnetlink_log.c	netfilter: nfnetlink_log: silence bogus compiler warning	2023-10-12 10:28:45 +02:00
nfnetlink_osf.c	netfilter: add missing module descriptions	2023-11-08 13:52:32 +01:00
nfnetlink_queue.c	netfilter: conntrack: convert nf_conntrack_update to netfilter verdicts	2023-10-18 10:26:43 +02:00
nft_bitwise.c
nft_byteorder.c	netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()	2023-11-14 16:16:21 +01:00
nft_chain_filter.c
nft_chain_nat.c	netfilter: add missing module descriptions	2023-11-08 13:52:32 +01:00
nft_chain_route.c
nft_cmp.c
nft_compat.c
nft_connlimit.c
nft_counter.c
nft_ct.c
nft_ct_fast.c
nft_dup_netdev.c
nft_dynset.c	netfilter: nf_tables: expose opaque set element as struct nft_elem_priv	2023-10-24 13:16:30 +02:00
nft_exthdr.c	netfilter: nftables: exthdr: fix 4-byte stack OOB write	2023-09-06 18:03:02 +02:00
nft_fib.c	netfilter: add missing module descriptions	2023-11-08 13:52:32 +01:00
nft_fib_inet.c
nft_fib_netdev.c
nft_flow_offload.c
nft_fwd_netdev.c	netfilter: add missing module descriptions	2023-11-08 13:52:32 +01:00
nft_hash.c
nft_immediate.c
nft_inner.c	nf_tables: fix NULL pointer dereference in nft_inner_init()	2023-10-12 10:28:45 +02:00
nft_last.c
nft_limit.c
nft_log.c
nft_lookup.c
nft_masq.c
nft_meta.c	netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()	2023-11-14 16:16:21 +01:00
nft_nat.c
nft_numgen.c
nft_objref.c
nft_osf.c
nft_payload.c	netfilter: nft_payload: fix wrong mac header matching	2023-10-12 10:28:45 +02:00
nft_queue.c
nft_quota.c
nft_range.c
nft_redir.c
nft_reject.c
nft_reject_inet.c
nft_reject_netdev.c
nft_rt.c
nft_set_bitmap.c	netfilter: nf_tables: set->ops->insert returns opaque set element in case of EEXIST	2023-10-24 13:37:46 +02:00
nft_set_hash.c	netfilter: nf_tables: set->ops->insert returns opaque set element in case of EEXIST	2023-10-24 13:37:46 +02:00
nft_set_pipapo.c	netfilter: nf_tables: set->ops->insert returns opaque set element in case of EEXIST	2023-10-24 13:37:46 +02:00
nft_set_pipapo.h	netfilter: nf_tables: expose opaque set element as struct nft_elem_priv	2023-10-24 13:16:30 +02:00
nft_set_pipapo_avx2.c
nft_set_pipapo_avx2.h
nft_set_rbtree.c	netfilter: nft_set_rbtree: Remove unused variable nft_net	2023-11-14 16:10:20 +01:00
nft_socket.c
nft_synproxy.c
nft_tproxy.c
nft_tunnel.c
nft_xfrm.c
utils.c
x_tables.c
xt_addrtype.c
xt_AUDIT.c
xt_bpf.c
xt_cgroup.c
xt_CHECKSUM.c
xt_CLASSIFY.c
xt_cluster.c
xt_comment.c
xt_connbytes.c
xt_connlabel.c
xt_connlimit.c
xt_connmark.c
xt_CONNSECMARK.c
xt_conntrack.c
xt_cpu.c
xt_CT.c
xt_dccp.c
xt_devgroup.c
xt_dscp.c
xt_DSCP.c
xt_ecn.c
xt_esp.c
xt_hashlimit.c
xt_helper.c
xt_hl.c
xt_HL.c
xt_HMARK.c
xt_IDLETIMER.c
xt_ipcomp.c
xt_iprange.c
xt_ipvs.c
xt_l2tp.c
xt_LED.c
xt_length.c
xt_limit.c
xt_LOG.c
xt_mac.c
xt_mark.c
xt_MASQUERADE.c
xt_multiport.c
xt_nat.c
xt_NETMAP.c
xt_nfacct.c
xt_NFLOG.c
xt_NFQUEUE.c
xt_osf.c
xt_owner.c
xt_physdev.c
xt_pkttype.c
xt_policy.c
xt_quota.c
xt_RATEEST.c
xt_rateest.c
xt_realm.c
xt_recent.c	netfilter: xt_recent: fix (increase) ipv6 literal buffer length	2023-11-08 13:53:36 +01:00
xt_REDIRECT.c
xt_repldata.h
xt_sctp.c
xt_SECMARK.c
xt_set.c
xt_socket.c
xt_state.c
xt_statistic.c
xt_string.c
xt_TCPMSS.c
xt_tcpmss.c
xt_TCPOPTSTRIP.c
xt_tcpudp.c
xt_TEE.c
xt_time.c
xt_TPROXY.c
xt_TRACE.c
xt_u32.c	netfilter: xt_u32: validate user space input	2023-08-30 17:34:01 +02:00