Subject: Re: [PATCH] Prevent crash on ip_conntrack removal

From: "David S. Miller" <[email-masked]>
Date: Sun, 22 Aug 2004 22:03:31 -0700

On Sun, 22 Aug 2004 14:58:01 +0200
Patrick McHardy <[email-masked]> wrote:

> The first fragment (offset=0) is given to ip_defrag by conntrack
> at PRE_ROUTING, without a dst_entry. Then conntrack is unloaded.
> Further fragments are now queued in ip_local_deliver. When the
> packet is reassembled and "continues" its way from
> ip_local_deliver, it doesn't have a dst_entry.
> 
> The opposite way is of course also possible, packets queued in
> ip_local_deliver can jump and appear in the PRE_ROUTING hook
> when conntrack is loaded, but that way doesn't seem to cause
> problems.

Thanks for the explanation Patrick.

Let me brain storm on this on Monday (tomorrow).