tree 393fa09a994a917624df36ac6a6ee9c63a066a1e
parent 6a48de0144767f2c6880540c0a4ac6741e3c440b
author Florian Westphal <fw@strlen.de> 1533205809 +0200
committer Pablo Neira Ayuso <pablo@netfilter.org> 1534441024 +0200

netfilter: conntrack: fix removal of conntrack entries when l4tracker is removed

nf_ct_l4proto_unregister_one() leaves conntracks added by
to-be-removed tracker behind, nf_ct_l4proto_unregister has to iterate
for each protocol to be removed.

v2: call nf_ct_iterate_destroy without holding nf_ct_proto_mutex.

Fixes: 2c41f33c1b703 ("netfilter: move table iteration out of netns exit paths")
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>