]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
projects / thirdparty / kernel / stable.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c57e796) | patch
netfilter: x_tables: cap allocations at 512 mbyte
authorFlorian Westphal <fw@strlen.de>
Tue, 27 Feb 2018 18:42:31 +0000 (19:42 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 26 Apr 2018 09:00:37 +0000 (11:00 +0200)
commitf64143c3329e5e6cab4a9c43dca2a056d05ab57b
treeb04768f0755f883752741c77f4e4639a99c67df2tree | snapshot
parentc57e796aabb906bc2c34df1c177d25349723927dcommit | diff
netfilter: x_tables: cap allocations at 512 mbyte

commit 19926968ea86a286aa6fbea16ee3f2e7442f10f0 upstream.

Arbitrary limit, however, this still allows huge rulesets
(> 1 million rules).  This helps with automated fuzzer as it prevents
oom-killer invocation.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/netfilter/x_tables.c diff | blob | blame | history
Mirror https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git