| To: | Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx> |
|---|---|
| Subject: | Re: [PATCH] fix netfilter refcounting [was Re: Conntrack leak (2.6.2rc2)] |
| From: | Steve Hill <steve@xxxxxxxxxxxx> |
| Date: | Wed, 4 Feb 2004 10:19:45 +0000 (GMT) |
| Cc: | David Miller <davem@xxxxxxxxxx>, netdev@xxxxxxxxxxx, netfilter-devel@xxxxxxxxxxxxxxxxxxx |
| In-reply-to: | <Pine.LNX.4.33.0402031825170.11950-100000@blackhole.kfki.hu> |
| References: | <Pine.LNX.4.33.0402031825170.11950-100000@blackhole.kfki.hu> |
| Sender: | netdev-bounce@xxxxxxxxxxx |
On Tue, 3 Feb 2004, Jozsef Kadlecsik wrote:
> Steve Hill reported a conntrack leakage in 2.6.2-rc2 when nat is enabled
> and the system forwards fragmented packets. It turned out that an
> nf_conntrack_put was missing from ip_copy_metadata:
I noticed this fix made it into the 2.6.2 release last night, so I have
tested with a vanilla 2.6.2 kernel this morning and can confirm it's fixed
the problem. Thank you.
- Steve Hill
Senior Software Developer Email: steve@xxxxxxxxxxxx
Navaho Technologies Ltd. Tel: +44-870-7034015
... Alcohol and calculus don't mix - Don't drink and derive! ...
|
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | [PATCH] atm/idt77252: correct printk of dma_addr_t, Randy.Dunlap |
|---|---|
| Next by Date: | [PATCH] IPV6: note on shared socket options, YOSHIFUJI Hideaki / 吉藤英明 |
| Previous by Thread: | Re: [PATCH] fix netfilter refcounting [was Re: Conntrack leak (2.6.2rc2)], David S. Miller |
| Next by Thread: | Re: Conntrack leak (2.6.2rc2), Harald Welte |
| Indexes: | [Date] [Thread] [Top] [All Lists] |