On Wed, 2013-10-23 at 17:37 +0100, Will Deacon wrote: > What I'm *not* 100% sure about is the table freeing path. There is a mutex > there for removing the table from a list, but I'm not sure how we ensure > that there are no parallel readers at that point. Sequence is : xt_replace_table(); get_counters(); xt_free_table_info(); get_counters() is the way we ensure no cpu is using old copy of the table before freeing. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html