]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: ipset: Fix adding an IPv4 range containing more than 2^31 addresses
authorJozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Sat, 23 Sep 2017 21:37:40 +0000 (23:37 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 26 Sep 2017 18:15:04 +0000 (20:15 +0200)
commit6dfee31a4ff727899b440ffe41c70219dfa73050
treeaee6458d67c8ea60bc2287880aab5cc1430d6501
parent2c560b442145381f8c57a7e3a99b5b6c4138776b
netfilter: ipset: Fix adding an IPv4 range containing more than 2^31 addresses

Wrong comparison prevented the hash types to add a range with more than
2^31 addresses but reported as a success.

Fixes Netfilter's bugzilla id #1005, reported by Oleg Serditov and
Oliver Ford.

Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/ipset/ip_set_hash_ip.c
net/netfilter/ipset/ip_set_hash_ipmark.c
net/netfilter/ipset/ip_set_hash_ipport.c
net/netfilter/ipset/ip_set_hash_ipportip.c
net/netfilter/ipset/ip_set_hash_ipportnet.c
net/netfilter/ipset/ip_set_hash_net.c
net/netfilter/ipset/ip_set_hash_netiface.c
net/netfilter/ipset/ip_set_hash_netnet.c
net/netfilter/ipset/ip_set_hash_netport.c
net/netfilter/ipset/ip_set_hash_netportnet.c