Re: [PATCH] Fix repeatable Oops on container destroy with conntrack

From: Pablo Neira Ayuso
Date: Mon Sep 12 2011 - 05:37:53 EST


On Mon, Sep 12, 2011 at 10:25:24AM +0300, Alexey Dobriyan wrote:
> On Sat, Sep 10, 2011 at 07:48:43PM +0100, Alex Bligh wrote:
> > --- a/net/netfilter/nf_conntrack_netlink.c
> > +++ b/net/netfilter/nf_conntrack_netlink.c
> > @@ -570,6 +570,11 @@ ctnetlink_conntrack_event(unsigned int events, struct nf_ct_event *item)
> > return 0;
> >
> > net = nf_ct_net(ct);
> > +
> > + /* container deinit, netlink may have died before death_by_timeout */
> > + if (!net->nfnl)
> > + return 0;
> > +
> > if (!item->report && !nfnetlink_has_listeners(net, group))
> > return 0;
>
> If this is correct fix, ->nfnl check should be folded into
> nfnetlink_has_listeners(), otherwise expectations aren't covered.

Agreed.
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/