Subject: Re: [PATCH] Prevent crash on ip_conntrack removal

From: Patrick McHardy <[email-masked]>
Date: Sat, 21 Aug 2004 17:10:20 +0200

David S. Miller wrote:

>I have a better idea.
>
>Instead of setting skb->dst to NULL, it should set it to some
>NULL destination entry which just frees up the packets.  Then
>no special case handling.  skb->dst==NULL packets should never
>get into the fragment queue to begin with.
>
The problem is that conntrack unload can cause packets without a
dst_entry to appear in ip_local_deliver, which is already after
the call to dst_input.

Regards
Patrick