From: Pablo Neira Ayuso <pablo@netfilter.org>
Date: Thu, 6 Feb 2014 15:15:39 +0000 (+0100)
Subject: netfilter: nft_rbtree: fix data handling of end interval elements
X-Git-Tag: v3.14-rc3~36^2~28^2~2
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=2fb91ddbf8e1dcb207e1e2085473aeaeff975102;p=pandora-kernel.git

netfilter: nft_rbtree: fix data handling of end interval elements

This patch fixes several things which related to the handling of
end interval elements:

* Chain use underflow with intervals and map: If you add a rule
  using intervals+map that introduces a loop, the error path of the
  rbtree set decrements the chain refcount for each side of the
  interval, leading to a chain use counter underflow.

* Don't copy the data part of the end interval element since, this
  area is uninitialized and this confuses the loop detection code.

* Don't allocate room for the data part of end interval elements
  since this is unused.

So, after this patch the idea is that end interval elements don't
have a data part.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Acked-by: Patrick McHardy <kaber@trash.net>
---

Reading git-diff-tree failed