On Sun, Jul 03, 2016 at 01:18:42PM +0800, Liping Zhang wrote: > From: Liping Zhang <liping.zhang@xxxxxxxxxxxxxx> > > When user adjust the hash size via /sys/module/nf_conntrack/parameters/hashsize, > something will break because race condition happened. > > This patch set aim to fix these bugs. > > When we do "cat /proc/net/nf_conntrack", and at the same time do hash resize, > nf_conntrack_htable_size and nf_conntrack_hash may become unrelated if we > read them separately, so oops will happen. Fix this in patch #1. > > When we do unlink help or timeout objects, and at the same time do hash resize, > we may miss unlinking some objects, later we will end up with invalid references. > Fix this in patch #2 and #3. Series applied to nf-next. We're already a bit late in the rc cycle and this has been broken since the beginning, so I'm inclined to follow the nf-next path. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html