Description of problem:

I just got a customer seeing SEGFAULT when using his custom configuration for conntrackd.conf, **not** containing the following stanzas:
~~~
General {
    ...
    HashSize <somevalue>
    HashLimit <somevalue>
    ...
}
~~~

This is a known issue fixed upstream by commit 3276471d23d4d96d55e9a0fb7a10983d8097dc45:
~~~
$ git show 3276471d23d4d96d55e9a0fb7a10983d8097dc45
commit 3276471d23d4d96d55e9a0fb7a10983d8097dc45
Author: Pablo Neira Ayuso <pablo>
Date:   Mon Mar 8 16:29:25 2021 +0100

    conntrackd: set default hashtable buckets and max entries if not specified
    
    Fall back to 65536 buckets and 262144 entries.
    
    It would be probably good to add code to autoadjust by reading
    /proc/sys/net/netfilter/nf_conntrack_buckets and
    /proc/sys/net/nf_conntrack_max.
    
    Closes: https://bugzilla.netfilter.org/show_bug.cgi?id=1491
    Signed-off-by: Pablo Neira Ayuso <pablo>

diff --git a/src/read_config_yy.y b/src/read_config_yy.y index 31109c4..b215a72 100644
--- a/src/read_config_yy.y
+++ b/src/read_config_yy.y
@@ -1780,5 +1780,11 @@ init_config(char *filename)
                                         NF_NETLINK_CONNTRACK_DESTROY;
        }
 
+       /* default hashtable buckets and maximum number of entries */
+       if (!CONFIG(hashsize))
+               CONFIG(hashsize) = 65536;
+       if (!CONFIG(limit))
+               CONFIG(limit) = 262144;
+
        return 0;
 }
~~~

All releases we ship (on RHEL7, RHEL8 and RHEL9) don't have this commit.
It would be nice to hence rebase to latest upstream.

If that's not possible, please backport the commit to RHEL9 and RHEL8 as well.

Version-Release number of selected component (if applicable):

conntrack-tools-1.4.5-10.el9
conntrack-tools-1.4.4-10.el8

How reproducible:

Always on customer system

Steps to Reproduce:

See https://bugzilla.netfilter.org/show_bug.cgi?id=1491