Zhiling Zou <[email protected]> writes: > ovs_ct_get_conn_labels() adds the labels extension when a conntrack > entry does not have one. Confirmed conntracks can be read locklessly, > so adding an extension may reallocate and free the extension block > while another CPU accesses it. > > Only add the extension for unconfirmed conntracks. A confirmed > conntrack without labels now fails the caller's label operation instead > of reallocating its extension storage. > > Fixes: c2ac66735870 ("openvswitch: Allow matching on conntrack label") > Cc: [email protected] > Reported-by: Vega <[email protected]> > Assisted-by: LLM > Signed-off-by: Zhiling Zou <[email protected]> > ---
Reviewed-by: Aaron Conole <[email protected]> _______________________________________________ dev mailing list [email protected] https://mail.openvswitch.org/mailman/listinfo/ovs-dev
