Liping Zhang <zlpnobody@xxxxxxx> wrote: > From: Liping Zhang <liping.zhang@xxxxxxxxxxxxxx> > > User can add ct entry via nfnetlink(IPCTNL_MSG_CT_NEW), and if the total > number reach the nf_conntrack_max, we will try to drop some ct entries. > > But in this case(the main function call path is ctnetlink_create_conntrack > -> nf_conntrack_alloc -> early_drop), rcu_read_lock is not held, so race > with hash resize will happen. Right, this was fine before because we held one of the spinlocks which blocks vs. resize. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
