diff options
| author | Gao Feng <fgao@ikuai8.com> | 2017-03-24 21:32:19 +0800 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2017-04-06 18:32:16 +0200 |
| commit | 92f73221f9e9e143d242e3eca9c512dac969765e (patch) | |
| tree | 9c493bd487511b3230393788568bfe3ae3ae81a2 /net/ipv4/netfilter | |
| parent | f323d9546927a012cafbb7e503e6aa0e9fbff94b (diff) | |
| download | linux-92f73221f9e9e143d242e3eca9c512dac969765e.tar.gz linux-92f73221f9e9e143d242e3eca9c512dac969765e.tar.bz2 linux-92f73221f9e9e143d242e3eca9c512dac969765e.zip | |
netfilter: expect: Make sure the max_expected limit is effective
Because the type of expecting, the member of nf_conn_help, is u8, it
would overflow after reach U8_MAX(255). So it doesn't work when we
configure the max_expected exceeds 255 with expect policy.
Now add the check for max_expected. Return the -EINVAL when it exceeds
the limit.
Signed-off-by: Gao Feng <fgao@ikuai8.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/ipv4/netfilter')
0 files changed, 0 insertions, 0 deletions