tree bdf19f8da6f73f11590de82eac4526eaa752cdc6
parent 10745642ecaddf9eb1d5e1221bb9d5af2f306d48
author Pablo Neira Ayuso <pablo@netfilter.org> 1700568862 +0100
committer Oleksandr Tymoshenko <ovt@google.com> 1701815339 +0000

netfilter: nf_tables: split async and sync catchall in two functions

[ Upstream commit 8837ba3e58ea1e3d09ae36db80b1e80853aada95 ]

list_for_each_entry_safe() does not work for the async case which runs
under RCU, therefore, split GC logic for catchall in two functions
instead, one for each of the sync and async GC variants.

The catchall sync GC variant never sees a _DEAD bit set on ever, thus,
this handling is removed in such case, moreover, allocate GC sync batch
via GFP_KERNEL.

BUG=b/313503901
TEST=presubmit
RELEASE_NOTE=None

cos-patch: security-high
Fixes: 93995bf4af2c ("netfilter: nf_tables: remove catchall element in GC sync path")
Reported-by: Florian Westphal <fw@strlen.de>
Change-Id: I14126f3d22803c47c72ef943536da0832e9e985f
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Reviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/61709
Tested-by: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>
Reviewed-by: Michael Kochera <kochera@google.com>