Re: [PATCH 3/3] netfilter: x_tables: fix ordering of jumpstack allocation and table update

On Wed, 2013-10-23 at 17:37 +0100, Will Deacon wrote:

What I'm *not* 100% sure about is the table freeing path. There is a mutex
there for removing the table from a list, but I'm not sure how we ensure
that there are no parallel readers at that point.

Sequence is :

xt_replace_table();
get_counters();
xt_free_table_info();

get_counters() is the way we ensure no cpu is using old copy of the
table before freeing.