diff options
| author | Florian Westphal <fw@strlen.de> | 2026-02-26 13:12:21 +0300 |
|---|---|---|
| committer | Florian Westphal <fw@strlen.de> | 2026-03-04 13:45:45 +0300 |
| commit | 34a6a003d4e493133c4dc81c055324646bb7ebef (patch) | |
| tree | bbac9894c70f22d73898aab29781e65716a907be | |
| parent | 013e2f91d0a4cac7396ac121ecdbc7bb71ca5cef (diff) | |
| download | linux-34a6a003d4e493133c4dc81c055324646bb7ebef.tar.xz | |
netfilter: nfnetlink_queue: remove locking in nfqnl_get_sk_secctx
We don't need the cb lock here.
Also, if skb was NULL we'd have crashed already.
Signed-off-by: Florian Westphal <fw@strlen.de>
| -rw-r--r-- | net/netfilter/nfnetlink_queue.c | 7 |
1 files changed, 0 insertions, 7 deletions
diff --git a/net/netfilter/nfnetlink_queue.c b/net/netfilter/nfnetlink_queue.c index 27300d3663da..5379d8ff39c0 100644 --- a/net/netfilter/nfnetlink_queue.c +++ b/net/netfilter/nfnetlink_queue.c @@ -592,15 +592,8 @@ static int nfqnl_get_sk_secctx(struct sk_buff *skb, struct lsm_context *ctx) { int seclen = 0; #if IS_ENABLED(CONFIG_NETWORK_SECMARK) - - if (!skb || !sk_fullsock(skb->sk)) - return 0; - - read_lock_bh(&skb->sk->sk_callback_lock); - if (skb->secmark) seclen = security_secid_to_secctx(skb->secmark, ctx); - read_unlock_bh(&skb->sk->sk_callback_lock); #endif return seclen; } |