From mboxrd@z Thu Jan 1 00:00:00 1970 From: David Miller Subject: Re: [PATCH 0/9] Netfilter/IPVS fixes for net Date: Fri, 08 Sep 2017 11:36:13 -0700 (PDT) Message-ID: <20170908.113613.678386423137863254.davem@davemloft.net> References: <1504892748-1605-1-git-send-email-pablo@netfilter.org> Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Cc: netfilter-devel@vger.kernel.org, netdev@vger.kernel.org To: pablo@netfilter.org Return-path: In-Reply-To: <1504892748-1605-1-git-send-email-pablo@netfilter.org> Sender: netdev-owner@vger.kernel.org List-Id: netfilter-devel.vger.kernel.org From: Pablo Neira Ayuso Date: Fri, 8 Sep 2017 19:45:39 +0200 > The following patchset contains Netfilter/IPVS fixes for your net tree, > they are: > > 1) Fix SCTP connection setup when IPVS module is loaded and any scheduler > is registered, from Xin Long. > > 2) Don't create a SCTP connection from SCTP ABORT packets, also from > Xin Long. > > 3) WARN_ON() and drop packet, instead of BUG_ON() races when calling > nf_nat_setup_info(). This is specifically a longstanding problem > when br_netfilter with conntrack support is in place, patch from > Florian Westphal. > > 4) Avoid softlock splats via iptables-restore, also from Florian. > > 5) Revert NAT hashtable conversion to rhashtable, semantics of rhlist > are different from our simple NAT hashtable, this has been causing > problems in the recent Linux kernel releases. From Florian. > > 6) Add per-bucket spinlock for NAT hashtable, so at least we restore > one of the benefits we got from the previous rhashtable conversion. > > 7) Fix incorrect hashtable size in memory allocation in xt_hashlimit, > from Zhizhou Tian. > > 8) Fix build/link problems with hashlimit and 32-bit arches, to address > recent fallout from a new hashlimit mode, from Vishwanath Pai. Pulled, thanks Pablo.