From: Pablo Neira Ayuso <pablo@netfilter.org>
Date: Tue, 10 Jun 2014 08:53:01 +0000 (+0200)
Subject: netfilter: nf_tables: use u32 for chain use counter
X-Git-Tag: omap-for-v3.16/fixes-rc4~53^2~31^2~9
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a0a7379e16b6e4c229d082f24c7e3ef9e812ed46;p=pandora-kernel.git

netfilter: nf_tables: use u32 for chain use counter

Since 4fefee5 ("netfilter: nf_tables: allow to delete several objects
from a batch"), every new rule bumps the chain use counter. However,
this is limited to 16 bits, which means that it will overrun after
2^16 rules.

Use a u32 chain counter and check for overflows (just like we do for
table objects).

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
---

Reading git-diff-tree failed