[PATCH net] Revert netfilter: ensure number of counters is 0 in do_replace()

2015-06-01 Thread Pablo Neira Ayuso
From: Bernhard Thaler bernhard.tha...@wvnet.at This partially reverts commit 1086bbe97a07 (netfilter: ensure number of counters is 0 in do_replace()) in net/bridge/netfilter/ebtables.c. Setting rules with ebtables does not work any more with 1086bbe97a07 place. There is an error message and no

[PATCH 2/3] netfilter: ensure number of counters is 0 in do_replace()

2015-05-22 Thread Pablo Neira Ayuso
From: Dave Jones da...@codemonkey.org.uk After improving setsockopt() coverage in trinity, I started triggering vmalloc failures pretty reliably from this code path: warn_alloc_failed+0xe9/0x140 __vmalloc_node_range+0x1be/0x270 vzalloc+0x4b/0x50 __do_replace+0x52/0x260 [ip_tables]

Re: netfilter: ensure number of counters is 0 in do_replace()

2015-05-21 Thread Pablo Neira Ayuso
On Tue, May 19, 2015 at 08:55:17PM -0400, Dave Jones wrote: After improving setsockopt() coverage in trinity, I started triggering vmalloc failures pretty reliably from this code path: warn_alloc_failed+0xe9/0x140 __vmalloc_node_range+0x1be/0x270 vzalloc+0x4b/0x50 __do_replace+0x52/0x260