From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> Date: Fri, 8 Sep 2017 19:45:39 +0200 > The following patchset contains Netfilter/IPVS fixes for your net tree, > they are: > > 1) Fix SCTP connection setup when IPVS module is loaded and any scheduler > is registered, from Xin Long. > > 2) Don't create a SCTP connection from SCTP ABORT packets, also from > Xin Long. > > 3) WARN_ON() and drop packet, instead of BUG_ON() races when calling > nf_nat_setup_info(). This is specifically a longstanding problem > when br_netfilter with conntrack support is in place, patch from > Florian Westphal. > > 4) Avoid softlock splats via iptables-restore, also from Florian. > > 5) Revert NAT hashtable conversion to rhashtable, semantics of rhlist > are different from our simple NAT hashtable, this has been causing > problems in the recent Linux kernel releases. From Florian. > > 6) Add per-bucket spinlock for NAT hashtable, so at least we restore > one of the benefits we got from the previous rhashtable conversion. > > 7) Fix incorrect hashtable size in memory allocation in xt_hashlimit, > from Zhizhou Tian. > > 8) Fix build/link problems with hashlimit and 32-bit arches, to address > recent fallout from a new hashlimit mode, from Vishwanath Pai. Pulled, thanks Pablo. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
