netfilter: synproxy: fix conntrackd interaction
authorEric Leblond <eric@regit.org>
Thu, 11 May 2017 16:56:38 +0000 (18:56 +0200)
committerRaspbian kernel package updater <root@raspbian.org>
Sun, 23 Jul 2017 03:03:51 +0000 (03:03 +0000)
commit0483194d46b21766b05603e391ab64717a1ecfa8
treea25dba36a2c2f2564fbb2730d4ac4015a878800f
parent361a09882380e70a37526c4e3c5380594443f277
netfilter: synproxy: fix conntrackd interaction

commit 87e94dbc210a720a34be5c1174faee5c84be963e upstream.

This patch fixes the creation of connection tracking entry from
netlink when synproxy is used. It was missing the addition of
the synproxy extension.

This was causing kernel crashes when a conntrack entry created by
conntrackd was used after the switch of traffic from active node
to the passive node.

Signed-off-by: Eric Leblond <eric@regit.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/netfilter/nf_conntrack_netlink.c