diff options
| author | Florian Westphal <fw@strlen.de> | 2024-09-18 15:16:33 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2024-09-26 13:03:03 +0200 |
| commit | e306e3739d9a35c89176281f9ff6c600fcc859a4 (patch) | |
| tree | 11cf1df247add626b615f9906a8fa9b5ecd26680 /tools/lib/api/debug.c | |
| parent | 8af79d3edb5fd2dce35ea0a71595b6d4f9962350 (diff) | |
kselftest: add test for nfqueue induced conntrack race
The netfilter race happens when two packets with the same tuple are DNATed
and enqueued with nfqueue in the postrouting hook.
Once one of the packet is reinjected it may be DNATed again to a different
destination, but the conntrack entry remains the same and the return packet
was dropped.
Based on earlier patch from Antonio Ojea.
Link: https://bugzilla.netfilter.org/show_bug.cgi?id=1766
Co-developed-by: Antonio Ojea <aojea@google.com>
Signed-off-by: Antonio Ojea <aojea@google.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tools/lib/api/debug.c')
0 files changed, 0 insertions, 0 deletions