From: Liping Zhang <zlpnobody@xxxxxxxxx> This patch set aims to fix some bugs related to nfnetlink_cthelper. They are: 1. if NFCTH_PRIV_DATA_LEN attr is empty, we cannot create a cthelper via nfnetlink 2. helper->expect_class_max is incorrect 3. when update cthelper via nfnetlink, memory leak will happen. It's ok to modify the nf_conntrack_expect_policy directly when do update, but drop the const qualifier is required 4. introduce a dummy list to fix a race when operate nfnl_cthelper Note, the patch set is based on these three patches which have not been applied or showed in nf picktree: http://patchwork.ozlabs.org/patch/740302/ http://patchwork.ozlabs.org/patch/740300/ http://patchwork.ozlabs.org/patch/739509/ Liping Zhang (5): netfilter: nfnl_cthelper: don't report error if NFCTH_PRIV_DATA_LEN is empty netfilter: nfnl_cthelper: fix incorrect helper->expect_class_max netfilter: drop const qualifier from struct nf_conntrack_expect_policy netfilter: nfnl_cthelper: fix memory leak when do update netfilter: nfnl_cthelper: fix a race when walk the nf_ct_helper_hash table include/net/netfilter/nf_conntrack_helper.h | 4 +- net/ipv4/netfilter/nf_nat_snmp_basic.c | 2 +- net/netfilter/nf_conntrack_amanda.c | 2 +- net/netfilter/nf_conntrack_expect.c | 2 +- net/netfilter/nf_conntrack_ftp.c | 2 +- net/netfilter/nf_conntrack_h323_main.c | 6 +- net/netfilter/nf_conntrack_helper.c | 2 +- net/netfilter/nf_conntrack_pptp.c | 2 +- net/netfilter/nf_conntrack_sane.c | 2 +- net/netfilter/nf_conntrack_sip.c | 2 +- net/netfilter/nf_conntrack_tftp.c | 2 +- net/netfilter/nfnetlink_cthelper.c | 226 +++++++++++++++------------- 12 files changed, 135 insertions(+), 119 deletions(-) -- 2.5.5 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html