Eric Dumazet 5b3501faa8 netfilter: nf_conntrack: per netns nf_conntrack_cachep ... nf_conntrack_cachep is currently shared by all netns instances, but because of SLAB_DESTROY_BY_RCU special semantics, this is wrong. If we use a shared slab cache, one object can instantly flight between one hash table (netns ONE) to another one (netns TWO), and concurrent reader (doing a lookup in netns ONE, 'finding' an object of netns TWO) can be fooled without notice, because no RCU grace period has to be observed between object freeing and its reuse. We dont have this problem with UDP/TCP slab caches because TCP/UDP hashtables are global to the machine (and each object has a pointer to its netns). If we use per netns conntrack hash tables, we also *must* use per netns conntrack slab caches, to guarantee an object can not escape from one namespace to another one. Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com> [Patrick: added unique slab name allocation] Cc: stable@kernel.org Signed-off-by: Patrick McHardy <kaber@trash.net>		2010-02-08 11:16:56 -08:00
..
conntrack.h	netfilter: nf_conntrack: per netns nf_conntrack_cachep	2010-02-08 11:16:56 -08:00
core.h	[SOCK][NETNS]: Add the percpu prot_inuse counter in the struct net.	2008-03-31 19:42:16 -07:00
dccp.h	[NETNS][DCCPV6]: Move the dccp_v6_ctl_sk on the struct net.	2008-04-13 22:32:25 -07:00
generic.h	net: remove [un]register_pernet_gen_... and update the docs.	2009-12-01 16:16:00 -08:00
hash.h	netns: introduce the net_hash_mix "salt" for hashes	2008-06-16 17:14:11 -07:00
ipv4.h	netns: ipmr: declare reg_vif_num per-namespace	2009-01-22 13:57:40 -08:00
ipv6.h	netns: embed ip6_dst_ops directly	2009-09-01 17:40:31 -07:00
mib.h	netns xfrm: per-netns MIBs	2008-11-25 17:59:52 -08:00
packet.h
unix.h
x_tables.h	net, netns_xt: shrink netns_xt members	2009-07-05 19:16:18 -07:00
xfrm.h	netns xfrm: deal with dst entries in netns	2010-01-24 22:47:53 -08:00