Displaying 1 result from an estimated 1 matches for "b39fb3c10c06".
[Bug 1778] New: Skipping garbage collection in nf_conncount.c stops working when jiffies wrap around
2024 Nov 07
0
[Bug 1778] New: Skipping garbage collection in nf_conncount.c stops working when jiffies wrap around
...type filter hook output priority 0;
ct count over 100000 drop
accept
}
}
To better show the effect I have modified the kernel like below with a
debugging print:
diff --git a/net/netfilter/nf_conncount.c b/net/netfilter/nf_conncount.c
index 4890af4dc263..b39fb3c10c06 100644
--- a/net/netfilter/nf_conncount.c
+++ b/net/netfilter/nf_conncount.c
@@ -134,6 +134,8 @@ static int __nf_conncount_add(struct net *net,
if (time_is_after_eq_jiffies((unsigned long)list->last_gc))
goto add_new_node;
+ if ((u32)jiffies == list->last_gc)
+...