Hi,
I'm happy to announce ipset 7.20: besides two json output corrections, it
contains an important race condition fix between swap/destroy and kernel
side add/del/test operation. In order to find the best solution to fix the
issue without slowing down any operations and keeping the internal rules
where execution may wait for concurrent operations to complete, there were
several iterations of the patch.
Userspace changes:
- Ignore *.order.cmd and *.symvers.cmd files in kernel builds
- Bash completion utility updated
- Fix json output for -name option (Mark)
- Fix hex literals in json output
- tests: increase timeout to cope with slow virtual test machine
Kernel part changes:
- treewide: Convert del_timer*() to timer_shutdown*() (Steven Rostedt)
- Use timer_shutdown_sync() when available, instead of del_timer_sync()
- netfilter: ipset: fix race condition between swap/destroy and kernel
side add/del/test v4
- netfilter: ipset: fix race condition between swap/destroy and kernel
side add/del/test v3
- netfilter: ipset: fix race condition between swap/destroy and kernel
side add/del/test v2
- netfilter: ipset: fix race condition between swap/destroy and kernel
side add/del/test
You can download the source code of ipset from:
https://ipset.netfilter.org
git://git.netfilter.org/ipset.git
Best regards,
Jozsef
--
E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlecsik.jozsef@xxxxxxxxx
PGP key : https://wigner.hu/~kadlec/pgp_public_key.txt
Address : Wigner Research Centre for Physics
H-1525 Budapest 114, POB. 49, Hungary
