Liping Zhang <zlpnobody@xxxxxxxxx> wrote: > Yes, here we should use clear_bit(IPS_SRC_NAT_DONE_BIT, &ct->status); > (For IPS_DST_NAT_DONE, we don't care about it, so we can > leave it unchanged.) Oh, right. > > Thats also broken(racy). We have to audit all the non-atomic writes of > > ct->status and change them to set/clear_bit()... > > I audited the related codes just now, this seems to be the last > ct->status writer which use non-atomic bit operation(of course, > except these unconfirmed ct->status writer). > > I will have a further and closer check. If you are not opposed to, > I can send a related patch to fix this. :) That would be great, thanks Liping! -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html