From mboxrd@z Thu Jan 1 00:00:00 1970 From: Pablo Neira Subject: Re: [PATCH] update raw patch in POM Date: Tue, 21 Jun 2005 10:59:21 +0200 Message-ID: <42B7D6E9.5050703@eurodev.net> References: <42A57FC4.7010508@tac.ch> <42A5B144.3090005@tac.ch> <42A625DA.7090807@eurodev.net> <42A6AB19.2040106@tac.ch> <42A6E685.3060408@eurodev.net> <42AEF774.8060300@tac.ch> <42B67BEC.1090105@tac.ch> <20050621003441.GI8335@postel.suug.ch> <20050621003930.GJ8335@postel.suug.ch> <42B7B7D8.1050204@tac.ch> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Cc: Netfilter Developers Return-path: To: Roberto Nibali In-Reply-To: <42B7B7D8.1050204@tac.ch> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-devel-bounces@lists.netfilter.org Errors-To: netfilter-devel-bounces@lists.netfilter.org List-Id: netfilter-devel.vger.kernel.org Roberto Nibali wrote: >>Almost forgot: the nf_reset() patch should "fix" this bug. "Fix" >>because it doesn't really fix it but rather hides this issue >>for a later possible revival. > > I thought so, however is there a clean fix which does not involve rewriting the > raw patch? I mean the unconditional nf_reset() is rather intrusive. What about > other netfilter extensions, they could have the same refcnt problem, couldn't they? I've started thinking that a better way to fix this would require to review current untracked logic. -- Pablo