Pablo Neira Ayuso 5251e2d212 [NETFILTER]: conntrack: fix race condition in early_drop ...

On SMP environments the maximum number of conntracks can be overpassed
under heavy stress situations due to an existing race condition.

        CPU A                   CPU B
     atomic_read()               ...
     early_drop()                ...
        ...                  atomic_read()
   allocate conntrack      allocate conntrack
     atomic_inc()             atomic_inc()

This patch moves the counter incrementation before the early drop stage.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

2006-09-22 15:19:54 -07:00

..

arp_tables.c

[NETFILTER]: x_tables: small check_entry & module_refcount cleanup

2006-09-22 15:19:51 -07:00

arpt_mangle.c

[NETFILTER]: x_tables: remove unused size argument to check/destroy functions

2006-09-22 14:55:34 -07:00

arptable_filter.c

[NETFILTER]: x_tables: remove unused argument to target functions

2006-09-22 14:55:33 -07:00

ip_conntrack_amanda.c

[NETFILTER]: amanda helper: convert to textsearch infrastructure

2006-06-17 21:29:09 -07:00

ip_conntrack_core.c

[NETFILTER]: conntrack: fix race condition in early_drop

2006-09-22 15:19:54 -07:00

ip_conntrack_ftp.c

Remove obsolete #include <linux/config.h>

2006-06-30 19:25:36 +02:00

ip_conntrack_helper_h323_asn1.c

[NETFILTER]: H.323 helper: fix sequence extension parsing

2006-05-23 15:15:10 -07:00

ip_conntrack_helper_h323_types.c

[NETFILTER]: H.323 helper: Add support for Call Forwarding

2006-06-17 21:29:11 -07:00

ip_conntrack_helper_h323.c

[NETFILTER]: H.323 helper: fix possible NULL-ptr dereference

2006-07-24 22:52:10 -07:00

ip_conntrack_helper_pptp.c

Remove obsolete #include <linux/config.h>

2006-06-30 19:25:36 +02:00

ip_conntrack_irc.c

Remove obsolete #include <linux/config.h>

2006-06-30 19:25:36 +02:00

ip_conntrack_netbios_ns.c

[NETFILTER]: netbios conntrack: fix compile

2006-09-22 14:53:51 -07:00

ip_conntrack_netlink.c

[NETFILTER]: ctnetlink: simplify the code to dump the conntrack table

2006-09-22 15:19:52 -07:00

ip_conntrack_proto_generic.c

[NETFILTER]: Change tunables to __read_mostly

2006-09-22 15:18:54 -07:00

ip_conntrack_proto_gre.c

[NETFILTER]: kill listhelp.h

2006-09-22 15:19:45 -07:00

ip_conntrack_proto_icmp.c

[NETFILTER]: Change tunables to __read_mostly

2006-09-22 15:18:54 -07:00

ip_conntrack_proto_sctp.c

[NETFILTER]: Change tunables to __read_mostly

2006-09-22 15:18:54 -07:00

ip_conntrack_proto_tcp.c

[NETFILTER]: Change tunables to __read_mostly

2006-09-22 15:18:54 -07:00

ip_conntrack_proto_udp.c

[NETFILTER]: Change tunables to __read_mostly

2006-09-22 15:18:54 -07:00

ip_conntrack_sip.c

[NET]: Remove unnecessary config.h includes from net/

2006-09-22 14:54:21 -07:00

ip_conntrack_standalone.c

[NETFILTER]: kill listhelp.h

2006-09-22 15:19:45 -07:00

ip_conntrack_tftp.c

[NETFILTER]: Rename init functions.

2006-03-28 17:02:48 -08:00

ip_nat_amanda.c

[NETFILTER]: Rename init functions.

2006-03-28 17:02:48 -08:00

ip_nat_core.c

[NETFILTER]: kill listhelp.h

2006-09-22 15:19:45 -07:00

ip_nat_ftp.c

[NETFILTER]: Rename init functions.

2006-03-28 17:02:48 -08:00

ip_nat_helper_h323.c

[NETFILTER]: H.323 helper: Add support for Call Forwarding

2006-06-17 21:29:11 -07:00

ip_nat_helper_pptp.c

Remove obsolete #include <linux/config.h>

2006-06-30 19:25:36 +02:00

ip_nat_helper.c

[NETFILTER]: kill listhelp.h

2006-09-22 15:19:45 -07:00

ip_nat_irc.c

[NETFILTER]: Rename init functions.

2006-03-28 17:02:48 -08:00

ip_nat_proto_gre.c

[NETFILTER]: Get rid of HW checksum invalidation

2006-09-22 14:53:54 -07:00

ip_nat_proto_icmp.c

[NETFILTER]: Get rid of HW checksum invalidation

2006-09-22 14:53:54 -07:00

ip_nat_proto_tcp.c

[NETFILTER]: Get rid of HW checksum invalidation

2006-09-22 14:53:54 -07:00

ip_nat_proto_udp.c

[NETFILTER]: Get rid of HW checksum invalidation

2006-09-22 14:53:54 -07:00

ip_nat_proto_unknown.c

[NETFILTER]: Remove unused function from NAT protocol helpers

2006-01-10 12:54:34 -08:00

ip_nat_rule.c

[NETFILTER]: kill listhelp.h

2006-09-22 15:19:45 -07:00

ip_nat_sip.c

[NETFILTER]: Add SIP connection tracking helper

2006-06-17 21:29:15 -07:00

ip_nat_snmp_basic.c

[NETFILTER]: SNMP NAT: fix byteorder confusion

2006-07-24 22:53:35 -07:00

ip_nat_standalone.c

[NETFILTER]: kill listhelp.h

2006-09-22 15:19:45 -07:00

ip_nat_tftp.c

[NETFILTER]: Rename init functions.

2006-03-28 17:02:48 -08:00

ip_queue.c

[NETFILTER]: Change tunables to __read_mostly

2006-09-22 15:18:54 -07:00

ip_tables.c

[NETFILTER]: x_tables: small check_entry & module_refcount cleanup

2006-09-22 15:19:51 -07:00

ipt_addrtype.c

[NETFILTER]: Rename init functions.

2006-03-28 17:02:48 -08:00

ipt_ah.c

[NETFILTER]: x_tables: remove unused size argument to check/destroy functions

2006-09-22 14:55:34 -07:00

ipt_CLUSTERIP.c

[NETFILTER]: x_tables: remove unused size argument to check/destroy functions

2006-09-22 14:55:34 -07:00

ipt_ecn.c

[NETFILTER]: x_tables: remove unused size argument to check/destroy functions

2006-09-22 14:55:34 -07:00

ipt_ECN.c

[NETFILTER]: x_tables: remove unused size argument to check/destroy functions

2006-09-22 14:55:34 -07:00

ipt_hashlimit.c

[NETFILTER]: x_tables: remove unused size argument to check/destroy functions

2006-09-22 14:55:34 -07:00

ipt_iprange.c

[NETFILTER]: Rename init functions.

2006-03-28 17:02:48 -08:00

ipt_LOG.c

[NETFILTER]: x_tables: remove unused size argument to check/destroy functions

2006-09-22 14:55:34 -07:00

ipt_MASQUERADE.c

[NETFILTER]: x_tables: remove unused size argument to check/destroy functions

2006-09-22 14:55:34 -07:00

ipt_NETMAP.c

[NETFILTER]: x_tables: remove unused size argument to check/destroy functions

2006-09-22 14:55:34 -07:00

ipt_owner.c

[NETFILTER]: x_tables: remove unused size argument to check/destroy functions

2006-09-22 14:55:34 -07:00

ipt_recent.c

[NETFILTER]: x_tables: remove unused size argument to check/destroy functions

2006-09-22 14:55:34 -07:00

ipt_REDIRECT.c

[NETFILTER]: x_tables: remove unused size argument to check/destroy functions

2006-09-22 14:55:34 -07:00

ipt_REJECT.c

[NETFILTER]: x_tables: remove unused size argument to check/destroy functions

2006-09-22 14:55:34 -07:00

ipt_SAME.c

[NETFILTER]: x_tables: remove unused size argument to check/destroy functions

2006-09-22 14:55:34 -07:00

ipt_TCPMSS.c

[NETFILTER]: ipt_TCPMSS: misc cleanup

2006-09-22 15:19:49 -07:00

ipt_tos.c

[NETFILTER]: Rename init functions.

2006-03-28 17:02:48 -08:00

ipt_TOS.c

[NETFILTER]: x_tables: remove unused size argument to check/destroy functions

2006-09-22 14:55:34 -07:00

ipt_ttl.c

[NETFILTER]: Rename init functions.

2006-03-28 17:02:48 -08:00

ipt_TTL.c

[NETFILTER]: x_tables: remove unused size argument to check/destroy functions

2006-09-22 14:55:34 -07:00

ipt_ULOG.c

[NETFILTER]: x_tables: remove unused size argument to check/destroy functions

2006-09-22 14:55:34 -07:00

iptable_filter.c

[NETFILTER]: x_tables: remove unused argument to target functions

2006-09-22 14:55:33 -07:00

iptable_mangle.c

[NETFILTER]: x_tables: remove unused argument to target functions

2006-09-22 14:55:33 -07:00

iptable_raw.c

[NETFILTER]: x_tables: remove unused argument to target functions

2006-09-22 14:55:33 -07:00

Kconfig

[NETFILTER]: x_tables: replace IPv4 DSCP target by address family independent version

2006-09-22 14:55:22 -07:00

Makefile

[NETFILTER]: x_tables: replace IPv4 DSCP target by address family independent version

2006-09-22 14:55:22 -07:00

nf_conntrack_l3proto_ipv4.c

Remove obsolete #include <linux/config.h>

2006-06-30 19:25:36 +02:00

nf_conntrack_proto_icmp.c

[NETFILTER]: Change tunables to __read_mostly

2006-09-22 15:18:54 -07:00