bugzilla-daemon@netfilter.org
2003-May-08 22:31 UTC
[Bug 91] New: conntrack unload loops forever (reproducible)
https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=91 Summary: conntrack unload loops forever (reproducible) Product: netfilter/iptables Version: linux-2.4.x Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component: connection tracking AssignedTo: laforge@netfilter.org ReportedBy: kaber@trash.net CC: netfilter-buglog@lists.netfilter.org i know this is a know issue but i'm unsure if it is know how to reproduce it. some printks in conntrack unload path showed it clears out the entire hash table but loops infinitely to clear some more because ip_conntrack_count doesn't reach 0 which means that there are still packet with references to some conntrack structures in the stack. this suggests the BR_NETPROTO_LOCK barrier in ip_conntrack_cleanup doesn't work as expected. to reproduce try this: - start downloading something over _slow_ line from the box running ip_conntrack - rmmod ip_conntrack i noted it always hangs when netstat shows packets in the sendqueue of a socket. i don't think data in the write queue has already been wrapped in skbs and visited conntrack but maybe this helps. after the queue clears, it still keeps looping. ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
Maybe Matching Threads
- [Bug 91] conntrack unload loops forever (reproducible)
- [Bug 91] conntrack unload loops forever (reproducible)
- [Bug 91] conntrack unload loops forever (reproducible)
- [SECURITY] Netfilter Security Advisory: Conntrack list_del() DoS
- [ANNOUNCE] conntrack-tools 1.4.6