Re: [PATCH nf v2 0/3] netfilter: nf_conncount: fix bugs in conn_free

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Nov 05, 2018 at 03:42:45AM +0900, Taehee Yoo wrote:
> Three bugs in nf_conncount are fixed by this patch series.
> 
> First patch fixes inconsistent lock state in conn_free().
> conn_free() is called both BH and process context. so that
> spin_lock_bh() should be used.
> 
> Second patch fixes unsafe locking scenario of list element.
> conn_free() can't protect double delete of list element.
> So that dead flag is added.
> 
> Third patch fixes unexpected permanent node of list.
> Node of nf_conncount list should be removed by GC. but it never happened.
> Because initial count value is 1 and it is never reached zero.
> So that GC don't remove it.

Well, actually this v2 has been applied :-)



[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux