On 07/01/11 11:24, Salih Gönüllü wrote: > On 01/06/2011 02:53 PM, Pablo Neira Ayuso wrote: > >> Let me check this, if the problem is what you're pointing (which makes >> sense at first look at the code) I guess that we need some refcounting >> for plugins to avoid double freeing. > > > When I comment out nflog_unbind_group(ui->nful_gh) in stop() inside > input/packet/ulogd_inppkt_NFLOG.c, ulogd does not segfault anymore. > > Here I have question: > > Does *pi in > static int stop(struct ulogd_pluginstance *pi) > > represent the NFLOG plugin or the individual log2:NFLOG ? I am asking > because it get started only once with pluginstance_started(), and > therefore should be stopped once (?) Indeed, accurate analysis. Would you give a try to the following patch?