git.openpandora.org / pandora-kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 1a4ac98) | patch
netfilter: ipset: fix timeout value overflow bug
authorJozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Mon, 7 May 2012 02:35:44 +0000 (02:35 +0000)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 16 May 2012 22:56:41 +0000 (00:56 +0200)
commit127f559127f5175e4bec3dab725a34845d956591
tree1fe965b02a8c54835caca7e88b0d8e28f9286127tree | snapshot
parent1a4ac9870fb82eed56623d0f69ec59aa5bef85fecommit | diff
netfilter: ipset: fix timeout value overflow bug

Large timeout parameters could result wrong timeout values due to
an overflow at msec to jiffies conversion (reported by Andreas Herz)

[ This patch was mangled by Pablo Neira Ayuso since David Laight and
  Eric Dumazet noticed that we were using hardcoded 1000 instead of
  MSEC_PER_SEC to calculate the timeout ]

Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/linux/netfilter/ipset/ip_set_timeout.h diff | blob | history
net/netfilter/xt_set.c diff | blob | history
Pandora Kernel Repository