]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
projects / thirdparty / kernel / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e5e24a3) | patch
netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master
authorPablo Neira Ayuso <pablo@netfilter.org>
Fri, 26 Jun 2026 11:40:42 +0000 (13:40 +0200)
committerFlorian Westphal <fw@strlen.de>
Tue, 30 Jun 2026 04:37:12 +0000 (06:37 +0200)
commitbf5355cfdede3e30b30e63a5a74f6bdaafb26082
treed1434b641e73960ac8e981cfd23ef516944c6d87tree | snapshot
parente5e24a365a5e024efef63cc49abb345fbd4852c5commit | diff
netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master

If userspace helper policy updates sets maximum number of expectation to
zero, cap it to NF_CT_EXPECT_MAX_CNT (255) on updates too.

Fixes: 397c8300972f ("netfilter: nf_conntrack_helper: cap maximum number of expectation at helper registration")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Florian Westphal <fw@strlen.de>
net/netfilter/nfnetlink_cthelper.c diff | blob | blame | history
A mirror of Linus' kernel repository