Re: [PATCH v2] nftables: nft_flush_table: handle chain dependencies
From: Pablo Neira Ayuso <pablo@netfilter.org>
Date: 2015-01-05 11:36:25
Also in:
lkml, netfilter-devel, stable
From: Pablo Neira Ayuso <pablo@netfilter.org>
Date: 2015-01-05 11:36:25
Also in:
lkml, netfilter-devel, stable
On Sat, Dec 27, 2014 at 12:39:25AM +0000, Asbjoern Sloth Toennesen wrote:
Update: I errously assumed that git add, while writing the commit message, would be added to the commit. Based on net-next f96fe225. Compiles and checkpatch clean. Jumping between chains doesn't mix well with flush ruleset, since nft_flush_table doesn't handle chains referencing chains. This way it will take one to two loops, to settle. Alternatively it can be solved by always having two loops,
I just sent you a different patch to address this, we may still have references from the elements to chains when using dictionaries, so I prefer to schedule the object release in this order: rules -> sets -> chains -> tables Thanks for diagnosing and sending an initial fix. P.S: I hope you enjoyed 31c3.