Skip to content
  • Pablo Neira Ayuso's avatar
    netfilter: conntrack: replace notify chain by function pointer · e34d5c1a
    Pablo Neira Ayuso authored
    
    
    This patch removes the notify chain infrastructure and replace it
    by a simple function pointer. This issue has been mentioned in the
    mailing list several times: the use of the notify chain adds
    too much overhead for something that is only used by ctnetlink.
    
    This patch also changes nfnetlink_send(). It seems that gfp_any()
    returns GFP_KERNEL for user-context request, like those via
    ctnetlink, inside the RCU read-side section which is not valid.
    Using GFP_KERNEL is also evil since netlink may schedule(),
    this leads to "scheduling while atomic" bug reports.
    
    Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
    e34d5c1a