[ovs-dev] [PATCH ovs v2] conntrack: Fix the icmp conntrack new state.

Ilya Maximets i.maximets at ovn.org
Wed Jan 27 16:58:35 UTC 2021


On 1/21/21 10:12 AM, xiangxia.m.yue at gmail.com wrote:
> From: Tonghao Zhang <xiangxia.m.yue at gmail.com>
> 
> The same icmp packet may traverse conntrack module more than once.
> Or same icmp packets traverse contranck module in orderly.
> 
> Don't change state to CS_ESTABLISHED before receiving reply or related packets.
> 
> Fixes: a867c010ee91 ("conntrack: Fix conntrack new state")
> Signed-off-by: Tonghao Zhang <xiangxia.m.yue at gmail.com>
> ---
> v2:
> 1. add test case
> 2. change the commit message, and title
> 3. change the fix tag

Thanks, Tonghao, Aaron and Yi-Hung!
Applied to master and backported down to 2.13.

I had to also backport commit
d93c3111ccbf ("conntrack: Fix icmp conntrack state.") from master
since this one were missing on 2.13.

Best regards, Ilya Maximets.



More information about the dev mailing list