Slide 43
Slide 43 text
43
● [v2] netfilter: nf_conntrack: resolve clash for matching conntracks
Fix for Conntrack Races (1)
/* Resolve race on insertion if this protocol allows this. */
static int nf_ct_resolve_clash(...)
{
...
if (... || nf_ct_match(ct, loser_ct)) {
nf_ct_acct_merge(ct, ctinfo, loser_ct);
nf_conntrack_put(&loser_ct->ct_general);
nf_ct_set(skb, ct, oldinfo);
return NF_ACCEPT;
}
...
}