Re: [PATCH] fix mem-leak in netfilter

From: David S. Miller
Date: Wed May 17 2006 - 03:06:16 EST

From: Patrick McHardy <kaber@xxxxxxxxx>
Date: Wed, 17 May 2006 08:26:03 +0200

> Stephen Frost wrote:
> > Looking at this again... The ttl isn't copied into 'ttl' unless the
> > check_set has TTL turned on. This means that the overwritting was fine,
> > if you accept that you can only ever match on TTL, or never match on it.
> > That doesn't seem right to me. The TTL in the table should always be
> > kept up-to-date and the only question is if the current rule requires it
> > for a match or not.
> OK, updated patch attached. The TTL is now always kept up-to-date.

Looks nice.

Is there any reasonable reason to allow ip_pkt_list_tot to ever be
larger than say 255? If we can accept that limit, we can shrink
the recent_entry considerably by packing the index and nstamps
into a single word next to ttl.
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at
Please read the FAQ at