]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
netfilter: x_tables: add counters allocation wrapper
authorFlorian Westphal <fw@strlen.de>
Tue, 27 Feb 2018 18:42:33 +0000 (19:42 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 26 Apr 2018 09:02:21 +0000 (11:02 +0200)
commit82b68ecde5d056588799f0d38e675bbb81fe3b46
tree9710a99b66102fce8910703cc452ae8915e47387
parentfab0b3ce67a54f45848ee5d6023ef9a42153a2c9
netfilter: x_tables: add counters allocation wrapper

commit c84ca954ac9fa67a6ce27f91f01e4451c74fd8f6 upstream.

allows to have size checks in a single spot.
This is supposed to reduce oom situations when fuzz-testing xtables.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
include/linux/netfilter/x_tables.h
net/ipv4/netfilter/arp_tables.c
net/ipv4/netfilter/ip_tables.c
net/ipv6/netfilter/ip6_tables.c
net/netfilter/x_tables.c