Re: [PATCH] netfilter: xtables: fix reentrancy

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Le vendredi 18 mars 2011 Ã 11:27 +0100, Jesper Dangaard Brouer a Ãcrit :

> I have actually enabled PREEMPTion, am I in trouble then?
> 

Well, to get problem on localy generated trafic (as all forwarding is
done from softirq handler), you'll need a malicious -j RETURN in OUTPUT
hook (in the OUTPUT chain, not a called one)

Also, even for localy generated trafic, I guess most callers block BH
before calling ipt_do_table() anyway...

> I have modified the .config I got from you, quite a lot, during my 
> attempts to find the CCISS/HPSA problem.
> 
> Which reminds me that I needed to enable, the follwing config options, 
> (which your config didn't have):
>   CONFIG_PCIEASPM=y
>   CONFIG_X86_X2APIC=y
> 
> In order to get rid of a PCI warning:
>   NMI: PCI system error (SERR) for reason b1 on CPU 0.
>   Dazed and confused, but trying to continue
> 
> The system worked fine, and you might not see this issue on your G6 
> servers, as its most likely BIOS related (my server is a HP DL370 G6).
> 

Mine is ProLiant BL460c G6

> FYI: Operations have deployed the kernel on prod server this morning.

Okay, lets pray ;)



--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux