]> git.ipfire.org Git - thirdparty/iptables.git/commit
libxt_*limit: avoid division by zero
authorJan Engelhardt <jengelh@inai.de>
Sat, 28 Jul 2012 17:10:08 +0000 (19:10 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 31 Jul 2012 11:32:26 +0000 (13:32 +0200)
commit9d69da4bdb1d546218d168b72f12ac8aa042e3d8
tree781a8b8638bcba108c85f18f8b91bc85e11f43f4
parenta19988f2795770ce470562c1795e1cf53e3aa54b
libxt_*limit: avoid division by zero

It was possible to specify -A mychain -m hashlimit --hashlimit
600059/minute; this would convert to r->avg=0, which subsequently
causes a division by zero when printing with -S mychain.

1. Avoid division by zero in print_rate by printing infinity
   instead.
2. Rewrite the test in parse_rate to properly reject too high rates.

Signed-off-by: Jan Engelhardt <jengelh@inai.de>
extensions/libxt_hashlimit.c
extensions/libxt_limit.c