On Tue, Sep 02, 2014 at 12:14:27PM +0200, leroy christophe wrote:Thanks, it does fix the Oops I had.
Calling 'iptables-compat -L', first time nothing is listed on the screen.I'm going to pass this patch to -stable asap:
Second try, it generates following Oops.
commit b88825de8545ad252c31543fef13cadf4de7a2bc
Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
Date: Tue Aug 5 17:25:59 2014 +0200
netfilter: nf_tables: don't update chain with unset counters
Fix possible replacement of the per-cpu chain counters by null
pointer when updating an existing chain in the commit path.
Reported-by: Matteo Croce <technoboy85@xxxxxxxxx>
Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
I think it's the root cause for this problem.