Re: [PATCH nf,v2] netfilter: nf_tables: release objects on netns destruction

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, Dec 09, 2015 at 08:55:31PM +0100, Pablo Neira Ayuso wrote:
> We have to release the existing objects on netns removal otherwise we
> leak them. Chains are unregistered in first place to make sure no
> packets are walking on our rules and sets anymore.

I have detected a problem in this patch.

The netns_exit path from every family is removing the afinfo object
before this iteration here, so this is not working in case family
netns exit callbacks are called before the ones from the core.

I'm going to toss it, will send a new version.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux