Patrick McHardy 6b69fe0c73 netfilter: nf_conntrack_tcp: fix endless loop ... When a conntrack entry is destroyed in process context and destruction is interrupted by packet processing and the packet is an attempt to reopen a closed connection, TCP conntrack tries to kill the old entry itself and returns NF_REPEAT to pass the packet through the hook again. This may lead to an endless loop: TCP conntrack repeatedly finds the old entry, but can not kill it itself since destruction is already in progress, but destruction in process context can not complete since TCP conntrack is keeping the CPU busy. Drop the packet in TCP conntrack if we can't kill the connection ourselves to avoid this. Reported by: hemao77@gmail.com [ Kernel bugzilla #11058 ] Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>		2008-07-09 15:06:12 -07:00
..
core.c	[NET] NETNS: Omit net_device->nd_net without CONFIG_NET_NS.	2008-03-26 04:39:53 +09:00
Kconfig	netfilter: Kconfig: default DCCP/SCTP conntrack support to the protocol config values	2008-05-08 01:16:04 -07:00
Makefile	[NETFILTER]: nf_conntrack: add DCCP protocol support	2008-04-14 11:15:49 +02:00
nf_conntrack_amanda.c	[NETFILTER]: nf_conntrack: add tuplehash l3num/protonum accessors	2008-04-14 11:15:52 +02:00
nf_conntrack_core.c	netfilter: nf_conntrack: fix ctnetlink related crash in nf_nat_setup_info()	2008-06-11 17:51:10 -07:00
nf_conntrack_ecache.c
nf_conntrack_expect.c	netfilter: nf_conntrack_expect: fix error path unwind in nf_conntrack_expect_init()	2008-05-29 03:19:37 -07:00
nf_conntrack_extend.c	netfilter: nf_nat: fix RCU races	2008-06-17 15:51:47 -07:00
nf_conntrack_ftp.c	[NETFILTER]: nf_conntrack: add tuplehash l3num/protonum accessors	2008-04-14 11:15:52 +02:00
nf_conntrack_h323_asn1.c
nf_conntrack_h323_main.c	netfilter: nf_conntrack_h323: fix module unload crash	2008-06-17 15:52:32 -07:00
nf_conntrack_h323_types.c
nf_conntrack_helper.c	[NETFILTER]: annotate rest of nf_conntrack_* with const	2008-04-14 11:15:42 +02:00
nf_conntrack_irc.c	[NETFILTER]: annotate rest of nf_conntrack_* with const	2008-04-14 11:15:42 +02:00
nf_conntrack_l3proto_generic.c	[NETFILTER]: nf_conntrack: use bool type in struct nf_conntrack_l3proto	2008-04-14 11:15:52 +02:00
nf_conntrack_netbios_ns.c	[NETFILTER]: nf_conntrack: introduce expectation classes and policies	2008-03-25 20:09:15 -07:00
nf_conntrack_netlink.c	netfilter: ctnetlink: dump conntrack ID in event messages	2008-05-13 23:27:11 -07:00
nf_conntrack_pptp.c	[NETFILTER]: nf_conntrack: replace NF_CT_DUMP_TUPLE macro indrection by function call	2008-04-14 11:15:54 +02:00
nf_conntrack_proto.c	[NETFILTER]: nf_conntrack: add tuplehash l3num/protonum accessors	2008-04-14 11:15:52 +02:00
nf_conntrack_proto_dccp.c	[NETFILTER]: nf_conntrack: use bool type in struct nf_conntrack_l4proto	2008-04-14 11:15:53 +02:00
nf_conntrack_proto_generic.c	[NETFILTER]: nf_conntrack: use bool type in struct nf_conntrack_l4proto	2008-04-14 11:15:53 +02:00
nf_conntrack_proto_gre.c	[NETFILTER]: nf_conntrack: replace NF_CT_DUMP_TUPLE macro indrection by function call	2008-04-14 11:15:54 +02:00
nf_conntrack_proto_sctp.c	[NETFILTER]: nf_conntrack: const annotations in nf_conntrack_sctp, nf_nat_proto_gre	2008-04-14 11:15:54 +02:00
nf_conntrack_proto_tcp.c	netfilter: nf_conntrack_tcp: fix endless loop	2008-07-09 15:06:12 -07:00
nf_conntrack_proto_udp.c	[NETFILTER]: nf_conntrack: use bool type in struct nf_conntrack_l4proto	2008-04-14 11:15:53 +02:00
nf_conntrack_proto_udplite.c	[NETFILTER]: nf_conntrack: use bool type in struct nf_conntrack_l4proto	2008-04-14 11:15:53 +02:00
nf_conntrack_sane.c	[NETFILTER]: nf_conntrack: replace NF_CT_DUMP_TUPLE macro indrection by function call	2008-04-14 11:15:54 +02:00
nf_conntrack_sip.c	netfilter: nf_conntrack_sip: restrict RTP expect flushing on error to last request	2008-05-08 01:15:21 -07:00
nf_conntrack_standalone.c	netfilter: assign PDE->fops before gluing PDE into /proc tree	2008-05-02 04:10:57 -07:00
nf_conntrack_tftp.c	[NETFILTER]: nf_conntrack: replace NF_CT_DUMP_TUPLE macro indrection by function call	2008-04-14 11:15:54 +02:00
nf_internals.h
nf_log.c	netfilter: Make nflog quiet when no one listen in userspace.	2008-06-11 17:50:27 -07:00
nf_queue.c	Remove duplicated unlikely() in IS_ERR()	2008-04-29 08:06:25 -07:00
nf_sockopt.c	[NET] NETNS: Omit sock->sk_net without CONFIG_NET_NS.	2008-03-26 04:39:55 +09:00
nfnetlink.c
nfnetlink_log.c	[NETFILTER]: Replate direct proc_fops assignment with proc_create call.	2008-03-27 16:55:53 -07:00
nfnetlink_queue.c	netfilter: {nfnetlink,ip,ip6}_queue: fix skb_over_panic when enlarging packets	2008-04-29 03:16:34 -07:00
x_tables.c	netfilter: assign PDE->data before gluing PDE into /proc tree	2008-05-02 04:11:52 -07:00
xt_CLASSIFY.c
xt_comment.c
xt_connbytes.c	rename div64_64 to div64_u64	2008-05-01 08:03:58 -07:00
xt_connlimit.c	netfilter: xt_connlimit: fix accouning when receive RST packet in ESTABLISHED state	2008-06-04 09:57:51 -07:00
xt_CONNMARK.c
xt_connmark.c
xt_CONNSECMARK.c	[NETFILTER]: annotate xtables targets with const and remove casts	2008-04-14 09:56:05 +02:00
xt_conntrack.c	[NETFILTER]: nf_conntrack: add tuplehash l3num/protonum accessors	2008-04-14 11:15:52 +02:00
xt_dccp.c	[NETFILTER]: annotate xtables targets with const and remove casts	2008-04-14 09:56:05 +02:00
xt_DSCP.c
xt_dscp.c
xt_esp.c	[NETFILTER]: annotate xtables targets with const and remove casts	2008-04-14 09:56:05 +02:00
xt_hashlimit.c	netfilter: assign PDE->data before gluing PDE into /proc tree	2008-05-02 02:45:42 -07:00
xt_helper.c
xt_iprange.c	netfilter: xt_iprange: module aliases for xt_iprange	2008-05-13 23:27:48 -07:00
xt_length.c
xt_limit.c
xt_mac.c
xt_mark.c
xt_MARK.c
xt_multiport.c	[NETFILTER]: annotate xtables targets with const and remove casts	2008-04-14 09:56:05 +02:00
xt_NFLOG.c
xt_NFQUEUE.c
xt_NOTRACK.c
xt_owner.c
xt_physdev.c
xt_pkttype.c
xt_policy.c	[NETFILTER]: annotate xtables targets with const and remove casts	2008-04-14 09:56:05 +02:00
xt_quota.c
xt_RATEEST.c	[NETFILTER]: annotate xtables targets with const and remove casts	2008-04-14 09:56:05 +02:00
xt_rateest.c	[NETFILTER]: annotate xtables targets with const and remove casts	2008-04-14 09:56:05 +02:00
xt_realm.c
xt_sctp.c	[NETFILTER]: annotate xtables targets with const and remove casts	2008-04-14 09:56:05 +02:00
xt_SECMARK.c
xt_state.c
xt_statistic.c
xt_string.c
xt_TCPMSS.c
xt_tcpmss.c	[NETFILTER]: annotate xtables targets with const and remove casts	2008-04-14 09:56:05 +02:00
xt_TCPOPTSTRIP.c	netfilter: xt_TCPOPTSTRIP: signed tcphoff for ipv6_skip_exthdr() retval	2008-04-29 03:15:10 -07:00
xt_tcpudp.c	[NETFILTER]: annotate xtables targets with const and remove casts	2008-04-14 09:56:05 +02:00
xt_time.c	[NETFILTER]: annotate xtables targets with const and remove casts	2008-04-14 09:56:05 +02:00
xt_TRACE.c
xt_u32.c