summaryrefslogtreecommitdiffstats
path: root/include/net/netns/ipv4.h
diff options
context:
space:
mode:
authorPatrick McHardy <kaber@trash.net>2010-02-08 11:18:07 -0800
committerDavid S. Miller <davem@davemloft.net>2010-02-08 11:18:07 -0800
commitd696c7bdaa55e2208e56c6f98e6bc1599f34286d (patch)
tree628782197c21b1e8611a41914865cdba586a1c65 /include/net/netns/ipv4.h
parent14c7dbe043d01a83a30633ab6b109ba2ac61d9f7 (diff)
downloadop-kernel-dev-d696c7bdaa55e2208e56c6f98e6bc1599f34286d.zip
op-kernel-dev-d696c7bdaa55e2208e56c6f98e6bc1599f34286d.tar.gz
netfilter: nf_conntrack: fix hash resizing with namespaces
As noticed by Jon Masters <jonathan@jonmasters.org>, the conntrack hash size is global and not per namespace, but modifiable at runtime through /sys/module/nf_conntrack/hashsize. Changing the hash size will only resize the hash in the current namespace however, so other namespaces will use an invalid hash size. This can cause crashes when enlarging the hashsize, or false negative lookups when shrinking it. Move the hash size into the per-namespace data and only use the global hash size to initialize the per-namespace value when instanciating a new namespace. Additionally restrict hash resizing to init_net for now as other namespaces are not handled currently. Cc: stable@kernel.org Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'include/net/netns/ipv4.h')
-rw-r--r--include/net/netns/ipv4.h1
1 files changed, 1 insertions, 0 deletions
diff --git a/include/net/netns/ipv4.h b/include/net/netns/ipv4.h
index 2eb3814..9a4b8b7 100644
--- a/include/net/netns/ipv4.h
+++ b/include/net/netns/ipv4.h
@@ -40,6 +40,7 @@ struct netns_ipv4 {
struct xt_table *iptable_security;
struct xt_table *nat_table;
struct hlist_head *nat_bysource;
+ unsigned int nat_htable_size;
int nat_vmalloced;
#endif
OpenPOWER on IntegriCloud