[PATCH 04/53] netns xfrm: per-netns xfrm_state_all list

David Miller davem at davemloft.net
Tue Nov 25 17:16:18 PST 2008


From: Alexey Dobriyan <adobriyan at gmail.com>
Date: Tue, 25 Nov 2008 20:26:36 +0300

> This is done to get
> a) simple "something leaked" check
> b) cover possible DoSes when other netns puts many, many xfrm_states
>    onto a list.
> c) not miss "alien xfrm_state" check in some of list iterators in future.
> 
> Signed-off-by: Alexey Dobriyan <adobriyan at gmail.com>

Applied.


More information about the Containers mailing list