[Xen-devel] race in vif-common.sh

[Andreas Kinzler <hfp@xxxxxxxxx>]

Hello

in /etc/xen/scripts/vif-common.sh there is a function handle_iptable. At its start there 
is a check for a working iptables implementation. This check is outside the iptables lock 
section (claim_lock "iptables") and even if it is only a read-only operation 
the underlying iptables operation still accesses the xtables lock. I debugged a 
malfunction (=race) with multiple vif-interfaces down to the following iptables error 
message in the check section above:

iptables -L -n
Another app is currently holding the xtables lock. Perhaps you want to use the 
-w option?

So this check needs to be inside the lock or removed at all (iptables should be 
working).

Regards Andreas



_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
https://lists.xen.org/xen-devel