Re: [PATCH nf] netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, Sep 23, 2021 at 04:44:34PM +0200, Florian Westphal wrote:
> This is a revert of
> 7b1957b049 ("netfilter: nf_defrag_ipv4: use net_generic infra")
> and a partial revert of
> 8b0adbe3e3 ("netfilter: nf_defrag_ipv6: use net_generic infra").
> 
> If conntrack is builtin and kernel is booted with:
> nf_conntrack.enable_hooks=1
> 
> .... kernel will fail to boot due to a NULL deref in
> nf_defrag_ipv4_enable(): Its called before the ipv4 defrag initcall is
> made, so net_generic() returns NULL.
> 
> To resolve this, move the user refcount back to struct net so calls
> to those functions are possible even before their initcalls have run.

Applied to nf, thanks.



[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux