| commit | 5bcf169444540cbb8646cb415087f5ec83f60432 | |
| author | Florian Westphal <fw@strlen.de> | |
| Tue, 27 Feb 2018 18:42:32 +0000 (27 19:42 +0100) | ||
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | |
| Thu, 26 Apr 2018 09:02:21 +0000 (26 11:02 +0200) | ||
| tree | 25c6024dd85b0228d7b8b964a298329bd67fa07e | treesnapshot (tar.gz zip) |
| parent | 764f2162d97a498269c9b67607fe163692a79aa7 | commitdiff |
netfilter: x_tables: limit allocation requests for blob rule heads
commit 9d5c12a7c08f67999772065afd50fb222072114e upstream.
This is a very conservative limit (134217728 rules), but good
enough to not trigger frequent oom from syzkaller.
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
commit 9d5c12a7c08f67999772065afd50fb222072114e upstream.
This is a very conservative limit (134217728 rules), but good
enough to not trigger frequent oom from syzkaller.
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
| net/netfilter/x_tables.c | diffblobblamehistory |