Re: [PATCH nf 0/2] netfilter: nf_tables: don't skip inactive chains during update

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, Oct 31, 2018 at 06:26:19PM +0100, Florian Westphal wrote:
> This fixes a packet path vs. control plane race caused by
> a bogus optimization: When chain is going away we must not
> elide updating rules[next_generation].  If we do, then access
> to the 'next generation' really access an old (previous) generation
> that might reference rules that have already been free'd.
> 
> Second patch adds a stress-testcase for this bug.
> I've added a new 'netfilter' directory for this so we can
> also add other test cases to e.g. exercise netns add/delete or
> module removal.

Applied, thanks Florian.



[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux