tree 580b23b89c04c85ad9795b37f81174e1bbb5311b
parent 5147d14e995c097571d383fe1287fb33345a51ee
author Patrick McHardy <kaber@trash.net> 1227570977 -0800
committer David S. Miller <davem@davemloft.net> 1227570977 -0800

netfilter: ctnetlink: fix conntrack creation race

Conntrack creation through ctnetlink has two races:

- the timer may expire and free the conntrack concurrently, causing an
  invalid memory access when attempting to put it in the hash tables

- an identical conntrack entry may be created in the packet processing
  path in the time between the lookup and hash insertion

Hold the conntrack lock between the lookup and insertion to avoid this.

Reported-by: Zoltan Borbely <bozo@andrews.hu>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>