Re: [PATCH nf] netfilter: ctnetlink: don't use conntrack/expect object addresses as id

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Apr 01, 2019 at 01:08:54PM +0200, Florian Westphal wrote:
> else, we leak the addresses to userspace via ctnetlink events
> and dumps.
> 
> Compute an ID on demand based on the immutable parts of nf_conn struct.
> 
> Another advantage compared to using an address is that there is no
> immediate re-use of the same ID in case the conntrack entry is freed and
> reallocated again immediately.

Applied, thanks.



[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux