Joerg Marx fc350777c7 netfilter: nf_conntrack: fix a race in __nf_conntrack_confirm against nf_ct_get_next_corpse() ...

This race was triggered by a 'conntrack -F' command running in parallel
to the insertion of a hash for a new connection. Losing this race led to
a dead conntrack entry effectively blocking traffic for a particular
connection until timeout or flushing the conntrack hashes again.
Now the check for an already dying connection is done inside the lock.

Signed-off-by: Joerg Marx <[email protected]>
Signed-off-by: Patrick McHardy <[email protected]>

2010-05-20 15:55:30 +02:00

..

ipv4

netfilter: nf_ct_icmp: keep the ICMP ct entries longer

2009-06-08 15:53:43 +02:00

ipv6

ipv6: reassembly: use seperate reassembly queues for conntrack and local delivery

2009-12-15 16:59:18 +01:00

nf_conntrack_acct.h

…

nf_conntrack_core.h

netfilter: nf_conntrack: fix a race in __nf_conntrack_confirm against nf_ct_get_next_corpse()

2010-05-20 15:55:30 +02:00

nf_conntrack_ecache.h

netfilter: ctnetlink: support selective event delivery

2010-02-03 13:51:51 +01:00

nf_conntrack_expect.h

netfilter: nf_conntrack: add support for "conntrack zones"

2010-02-15 18:13:33 +01:00

nf_conntrack_extend.h

include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h

2010-03-30 22:02:32 +09:00

nf_conntrack_helper.h

netfilter: xtables: add CT target

2010-02-03 17:17:06 +01:00

nf_conntrack_l3proto.h

net: cleanup include/net

2009-11-04 05:06:25 -08:00

nf_conntrack_l4proto.h

netfilter: nf_conntrack: pass template to l4proto ->error() handler

2010-02-15 17:45:08 +01:00

nf_conntrack_tuple.h

net: cleanup include/net

2009-11-04 05:06:25 -08:00

nf_conntrack_zones.h

netfilter: nf_defrag_ipv4: fix compilation error with NF_CONNTRACK=n

2010-02-18 19:04:44 +01:00

nf_conntrack.h

netfilter: nf_conntrack: add support for "conntrack zones"

2010-02-15 18:13:33 +01:00

nf_log.h

…

nf_nat_core.h

netfilter: nfnetlink: constify message attributes and headers

2009-08-25 16:07:58 +02:00

nf_nat_helper.h

netfilter: nf_nat: support mangling a single TCP packet multiple times

2010-02-11 12:27:09 +01:00

nf_nat_protocol.h

net: cleanup include/net

2009-11-04 05:06:25 -08:00

nf_nat_rule.h

…

nf_nat.h

net: cleanup include/net

2009-11-04 05:06:25 -08:00

nf_queue.h

…

nf_tproxy_core.h

…

nfnetlink_log.h

…

xt_rateest.h

net: restore gnet_stats_basic to previous definition

2009-08-17 21:33:49 -07:00