Re: race in vif-common.sh

[Wei Liu <wei.liu2@citrix.com>]

CC George (author of recent change) and Ian

On Mon, Jul 03, 2017 at 01:30:09PM +0200, Andreas Kinzler wrote:
> Hello
> 
> in /etc/xen/scripts/vif-common.sh there is a function handle_iptable.
> At its start there is a check for a working iptables implementation.
> This check is outside the iptables lock section (claim_lock
> "iptables") and even if it is only a read-only operation the
> underlying iptables operation still accesses the xtables lock. I
> debugged a malfunction (=race) with multiple vif-interfaces down to
> the following iptables error message in the check section above:
> 
> iptables -L -n Another app is currently holding the xtables lock.
> Perhaps you want to use the -w option?
> 
> So this check needs to be inside the lock or removed at all (iptables
> should be working).
> 
> Regards Andreas
> 
> _______________________________________________ Xen-devel mailing list
> Xen-devel@lists.xen.org https://lists.xen.org/xen-devel

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
https://lists.xen.org/xen-devel