Unverified Commit 4372b7f8 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!15106 netfilter: conntrack: clamp maximum hashtable size to INT_MAX 

Merge Pull Request from: @ci-robot 
 
PR sync from: Dong Chenchen <dongchenchen2@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/CTG6VUSVN6TRT5B2OZ2SNMKA4DXM5KAW/ 
 
https://gitee.com/src-openeuler/kernel/issues/IBIQQN 
 
Link:https://gitee.com/openeuler/kernel/pulls/15106

 

Reviewed-by: default avatarZhang Changzhong <zhangchangzhong@huawei.com>
Reviewed-by: default avatarZhang Peng <zhangpeng362@huawei.com>
Signed-off-by: default avatarZhang Peng <zhangpeng362@huawei.com>
parents 4f6c0bee 7d3de071

net/netfilter/nf_conntrack_core.c

+4 −1
Original line number Diff line number Diff line
@@ -2568,12 +2568,15 @@ void *nf_ct_alloc_hashtable(unsigned int *sizep, int nulls) 
	struct hlist_nulls_head *hash;

	unsigned int nr_slots, i;



	if (*sizep > (UINT_MAX / sizeof(struct hlist_nulls_head)))

	if (*sizep > (INT_MAX / sizeof(struct hlist_nulls_head)))

		return NULL;



	BUILD_BUG_ON(sizeof(struct hlist_nulls_head) != sizeof(struct hlist_head));

	nr_slots = *sizep = roundup(*sizep, PAGE_SIZE / sizeof(struct hlist_nulls_head));



	if (nr_slots > (INT_MAX / sizeof(struct hlist_nulls_head)))

		return NULL;



	hash = kvcalloc(nr_slots, sizeof(struct hlist_nulls_head), GFP_KERNEL);



	if (hash && nulls)