From mboxrd@z Thu Jan 1 00:00:00 1970 From: Patrick McHardy Subject: Re: [PATCH 4/4] netfilter: xtables: merge registration structure to NFPROTO_UNSPEC Date: Wed, 31 Mar 2010 11:08:55 +0200 Message-ID: <4BB31127.7010409@trash.net> References: <1270022629-2494-1-git-send-email-jengelh@medozas.de> <1270022629-2494-5-git-send-email-jengelh@medozas.de> <4BB30861.3060101@trash.net> <4BB30AA0.9000904@trash.net> <4BB30F63.2030509@trash.net> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-15 Content-Transfer-Encoding: 7bit Cc: netfilter-devel@vger.kernel.org To: Jan Engelhardt Return-path: Received: from stinky.trash.net ([213.144.137.162]:57774 "EHLO stinky.trash.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S932943Ab0CaJI4 (ORCPT ); Wed, 31 Mar 2010 05:08:56 -0400 In-Reply-To: Sender: netfilter-devel-owner@vger.kernel.org List-ID: Jan Engelhardt wrote: > On Wednesday 2010-03-31 11:01, Patrick McHardy wrote: >> Jan Engelhardt wrote: >>>>> This will work because x_tables scans for NFPROTO_UNSPEC, >>>>> and arp/ebtables just using x_tables :-) >>>> I'm not sure I'm parsing this correctly. Both will find the match, >>>> however the nf_ct_l3proto_try_module_get() call will fail >>> It won't fail - it is using par->family, not par->match->family. >> That's broken then. > > How so? Because arptables and ebtables shouldn't be able to use this module directly. Even less so after a patch stating "merge registration structure".