Searched hist:a0a7379e (Results 1 – 2 of 2) sorted by relevance
| /openbmc/linux/include/net/netfilter/ |
| H A D | nf_tables.h | a0a7379e Tue Jun 10 03:53:01 CDT 2014 Pablo Neira Ayuso <pablo@netfilter.org> netfilter: nf_tables: use u32 for chain use counter
Since 4fefee5 ("netfilter: nf_tables: allow to delete several objects
from a batch"), every new rule bumps the chain use counter. However,
this is limited to 16 bits, which means that it will overrun after
2^16 rules.
Use a u32 chain counter and check for overflows (just like we do for
table objects).
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
a0a7379e Tue Jun 10 03:53:01 CDT 2014 Pablo Neira Ayuso <pablo@netfilter.org> netfilter: nf_tables: use u32 for chain use counter
Since 4fefee5 ("netfilter: nf_tables: allow to delete several objects
from a batch"), every new rule bumps the chain use counter. However,
this is limited to 16 bits, which means that it will overrun after
2^16 rules.
Use a u32 chain counter and check for overflows (just like we do for
table objects).
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
|
| /openbmc/linux/net/netfilter/ |
| H A D | nf_tables_api.c | a0a7379e Tue Jun 10 03:53:01 CDT 2014 Pablo Neira Ayuso <pablo@netfilter.org> netfilter: nf_tables: use u32 for chain use counter
Since 4fefee5 ("netfilter: nf_tables: allow to delete several objects
from a batch"), every new rule bumps the chain use counter. However,
this is limited to 16 bits, which means that it will overrun after
2^16 rules.
Use a u32 chain counter and check for overflows (just like we do for
table objects).
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
a0a7379e Tue Jun 10 03:53:01 CDT 2014 Pablo Neira Ayuso <pablo@netfilter.org> netfilter: nf_tables: use u32 for chain use counter
Since 4fefee5 ("netfilter: nf_tables: allow to delete several objects
from a batch"), every new rule bumps the chain use counter. However,
this is limited to 16 bits, which means that it will overrun after
2^16 rules.
Use a u32 chain counter and check for overflows (just like we do for
table objects).
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
|