netfilter: conntrack: free extension area immediately

Browse source

Instead of waiting for rcu grace period just free it directly.

This is safe because conntrack lookup doesn't consider extensions.

Other accesses happen while ct->ext can't be free'd, either because
a ct refcount was taken or because the conntrack hash bucket lock or
the dying list spinlock have been taken.

This allows to remove __krealloc in a followup patch, netfilter was the
only user.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Florian Westphal 2019-10-15 15:19:15 +02:00 • committed by Pablo Neira Ayuso

parent 49ca022bcc

commit 2ad9d7747c

3 changed files with 10 additions and 23 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

10

include/net/netfilter/nf_conntrack_extend.h

View file

2

net/netfilter/nf_conntrack_core.c

View file

21

net/netfilter/nf_conntrack_extend.c

View file