dect
/
linux-2.6
Archived
13
0
Fork 0
This repository has been archived on 2022-02-17. You can view files and clone it, but cannot push or open issues or pull requests.
linux-2.6/include/linux/netfilter_ipv4
Harald Welte 1dfbab5949 [NETFILTER] Fix conntrack event cache deadlock/oops
This patch fixes a number of bugs.  It cannot be reasonably split up in
multiple fixes, since all bugs interact with each other and affect the same
function:

Bug #1:
The event cache code cannot be called while a lock is held.  Therefore, the
call to ip_conntrack_event_cache() within ip_ct_refresh_acct() needs to be
moved outside of the locked section.  This fixes a number of 2.6.14-rcX
oops and deadlock reports.

Bug #2:
We used to call ct_add_counters() for unconfirmed connections without
holding a lock.  Since the add operations are not atomic, we could race
with another CPU.

Bug #3:
ip_ct_refresh_acct() lost REFRESH events in some cases where refresh
(and the corresponding event) are desired, but no accounting shall be
performed.  Both, evenst and accounting implicitly depended on the skb
parameter bein non-null.   We now re-introduce a non-accounting
"ip_ct_refresh()" variant to explicitly state the desired behaviour.

Signed-off-by: Harald Welte <laforge@netfilter.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2005-09-22 23:46:57 -07:00
..
ip_conntrack.h [NETFILTER] Fix conntrack event cache deadlock/oops 2005-09-22 23:46:57 -07:00
ip_conntrack_amanda.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ip_conntrack_core.h [NETFILTER]: kill __ip_ct_expect_unlink_destroy 2005-09-06 15:10:46 -07:00
ip_conntrack_ftp.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ip_conntrack_helper.h [NETFILTER]: Add ctnetlink subsystem 2005-08-29 15:31:49 -07:00
ip_conntrack_icmp.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ip_conntrack_irc.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ip_conntrack_pptp.h [NETFILTER] remove unneeded structure definition from conntrack helper 2005-09-22 23:45:44 -07:00
ip_conntrack_proto_gre.h [NETFILTER]: Add new PPTP conntrack and NAT helper 2005-09-19 15:33:08 -07:00
ip_conntrack_protocol.h [NETFILTER]: Add ctnetlink subsystem 2005-08-29 15:31:49 -07:00
ip_conntrack_sctp.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ip_conntrack_tcp.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ip_conntrack_tftp.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ip_conntrack_tuple.h [NETFILTER] Fix sparse endian warnings in pptp helper 2005-09-22 23:45:24 -07:00
ip_nat.h [NETFILTER]: Kill lockhelp.h 2005-06-21 14:01:30 -07:00
ip_nat_core.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ip_nat_helper.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ip_nat_pptp.h [NETFILTER]: Add new PPTP conntrack and NAT helper 2005-09-19 15:33:08 -07:00
ip_nat_protocol.h [NETFILTER]: Add ctnetlink subsystem 2005-08-29 15:31:49 -07:00
ip_nat_rule.h [NETFILTER]: Handle NAT module load race 2005-09-06 15:09:43 -07:00
ip_queue.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ip_tables.h [NETFILTER]: Add goto target 2005-08-29 16:04:18 -07:00
ipt_CLASSIFY.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_CLUSTERIP.h [NETFILTER]: Fix "iptables -D" rule deletion with ipt_CLUSTERIP target. 2005-06-22 12:38:33 -07:00
ipt_CONNMARK.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_DSCP.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_ECN.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_LOG.h [NETFILTER]: Extend netfilter logging API 2005-08-29 15:38:07 -07:00
ipt_MARK.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_NFQUEUE.h [NETFILTER]: Add "nfnetlink_queue" netfilter queue handler over nfnetlink 2005-08-29 15:36:56 -07:00
ipt_REJECT.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_SAME.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_TCPMSS.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_TOS.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_TTL.h [NETFILTER]: Add new iptables TTL target 2005-08-29 16:13:22 -07:00
ipt_ULOG.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_addrtype.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_ah.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_comment.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_connbytes.h [NETFILTER]: Nicer names for ipt_connbytes constants 2005-08-29 15:58:17 -07:00
ipt_connmark.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_conntrack.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_dccp.h [NETFILTER]: New iptables DCCP protocol header match 2005-08-29 15:54:28 -07:00
ipt_dscp.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_ecn.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_esp.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_hashlimit.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_helper.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_iprange.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_length.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_limit.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_mac.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_mark.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_multiport.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_owner.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_physdev.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_pkttype.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_realm.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_recent.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_sctp.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_state.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_string.h [NETFILTER]: Add string match 2005-08-29 16:04:07 -07:00
ipt_tcpmss.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_tos.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
ipt_ttl.h Linux-2.6.12-rc2 2005-04-16 15:20:36 -07:00
listhelp.h [NETFILTER]: Kill lockhelp.h 2005-06-21 14:01:30 -07:00