]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: ipset: restore allowing 64 clashing elements in hash:net,iface
authorJozsef Kadlecsik <kadlec@netfilter.org>
Tue, 22 Nov 2022 19:18:58 +0000 (20:18 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 22 Nov 2022 20:44:17 +0000 (21:44 +0100)
commit2bd6d2f364894d57be7a9f26e39344fcc6f69cfd
tree50baf1ca39069afc6417e2949f1d97c12b4b8086
parentfbb8da713be7e9d1dbd0ca212cd171a4ae6fdbb0
netfilter: ipset: restore allowing 64 clashing elements in hash:net,iface

The commit 2942bd909e89 ("netfilter: ipset: enforce documented limit to
prevent allocating huge memory") was too strict and prevented to add up to
64 clashing elements to a hash:net,iface type of set. This patch fixes the
issue and now the type behaves as documented.

Fixes: 2942bd909e89 ("netfilter: ipset: enforce documented limit to prevent allocating huge memory")
Signed-off-by: Jozsef Kadlecsik <kadlec@netfilter.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/ipset/ip_set_hash_gen.h