From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> Date: Tue, 25 Nov 2014 19:54:47 +0100 > This reverts commit 5195c14c8b27cc0b18220ddbf0e5ad3328a04187. > > If the conntrack clashes with an existing one, it is left out of > the unconfirmed list, thus, crashing when dropping the packet and > releasing the conntrack since golden rule is that conntracks are > always placed in any of the existing lists for traceability reasons. > > Reported-by: Daniel Borkmann <dborkman@xxxxxxxxxx> > Fixes: https://bugzilla.kernel.org/show_bug.cgi?id=88841 > Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> > --- > Hi David, > > Could you manually apply this to your net tree? We have a better > candidate fix to replace this broken patch that I will pass to you > once it gets sufficient testing. Done, thanks Pablo. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
