]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3f7f80d) | patch
netfilter: ipset: fix timeout value overflow bug
authorJozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Mon, 7 May 2012 02:35:44 +0000 (02:35 +0000)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 16 May 2012 22:56:41 +0000 (00:56 +0200)
commitceee516786367b3c62a83ebf14757d19c6c9f74a
tree1fe965b02a8c54835caca7e88b0d8e28f9286127tree | snapshot
parent3f7f80dface59843d9ef94003dc065ee802817e0commit | diff
netfilter: ipset: fix timeout value overflow bug

Large timeout parameters could result wrong timeout values due to
an overflow at msec to jiffies conversion (reported by Andreas Herz)

[ This patch was mangled by Pablo Neira Ayuso since David Laight and
  Eric Dumazet noticed that we were using hardcoded 1000 instead of
  MSEC_PER_SEC to calculate the timeout ]

Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/linux/netfilter/ipset/ip_set_timeout.h diff | blob | history
net/netfilter/xt_set.c diff | blob | history
Linux Kernel Source Tree.