Re: [PATCH nf] netfilter: avoid ipv6 -> nf_defrag_ipv6 module dependency

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, Aug 11, 2020 at 09:30:26AM +0200, Pablo Neira Ayuso wrote:
> On Mon, Aug 10, 2020 at 01:52:15PM +0200, Florian Westphal wrote:
> > nf_ct_frag6_gather is part of nf_defrag_ipv6.ko, not ipv6 core.
> > 
> > The current use of the netfilter ipv6 stub indirections  causes a module
> > dependency between ipv6 and nf_defrag_ipv6.
> > 
> > This prevents nf_defrag_ipv6 module from being removed because ipv6 can't
> > be unloaded.
> > 
> > Remove the indirection and always use a direct call.  This creates a
> > depency from nf_conntrack_bridge to nf_defrag_ipv6 instead:
> > 
> > modinfo nf_conntrack
> > depends:        nf_conntrack,nf_defrag_ipv6,bridge
> > 
> > .. and nf_conntrack already depends on nf_defrag_ipv6 anyway.
> > 
> > Signed-off-by: Florian Westphal <fw@xxxxxxxxx>
> > ---
> >  I can also re-send it when nf-next reopens later, whatever you prefer.
> 
> No problem, it can just sit here until net-next reopens.

Oh, I skipped the [PATCH nf] tag. This can go to nf.git then.



[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux