Unverified Commit a90a44c2 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!15098 netfilter: conntrack: clamp maximum hashtable size to INT_MAX 

Merge Pull Request from: @ci-robot 
 
PR sync from: Dong Chenchen <dongchenchen2@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/CTTUOMRCLNNVITZHVKC4FWZJOFJBGJJG/ 
 
https://gitee.com/src-openeuler/kernel/issues/IBIQQN 
 
Link:https://gitee.com/openeuler/kernel/pulls/15098

 

Reviewed-by: default avatarLi Nan <linan122@huawei.com>
Reviewed-by: default avatarZhang Changzhong <zhangchangzhong@huawei.com>
Signed-off-by: default avatarLi Nan <linan122@huawei.com>
parents aac4f645 89147407

net/netfilter/nf_conntrack_core.c

+4 −1
Original line number Diff line number Diff line
@@ -2435,12 +2435,15 @@ void *nf_ct_alloc_hashtable(unsigned int *sizep, int nulls) 
	struct hlist_nulls_head *hash;

	unsigned int nr_slots, i;



	if (*sizep > (UINT_MAX / sizeof(struct hlist_nulls_head)))

	if (*sizep > (INT_MAX / sizeof(struct hlist_nulls_head)))

		return NULL;



	BUILD_BUG_ON(sizeof(struct hlist_nulls_head) != sizeof(struct hlist_head));

	nr_slots = *sizep = roundup(*sizep, PAGE_SIZE / sizeof(struct hlist_nulls_head));



	if (nr_slots > (INT_MAX / sizeof(struct hlist_nulls_head)))

		return NULL;



	hash = kvcalloc(nr_slots, sizeof(struct hlist_nulls_head), GFP_KERNEL);



	if (hash && nulls)