diff options
| author | Florian Westphal <fw@strlen.de> | 2024-01-19 13:11:32 +0100 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2024-01-24 20:01:16 +0100 |
| commit | c9d9eb9c53d37cdebbad56b91e40baf42d5a97aa (patch) | |
| tree | 589e2e69c942f3c4110682995a8748ffddf46171 /net/netfilter/nf_tables_api.c | |
| parent | 01acb2e8666a6529697141a6017edbf206921913 (diff) | |
netfilter: nft_limit: reject configurations that cause integer overflow
Reject bogus configs where internal token counter wraps around.
This only occurs with very very large requests, such as 17gbyte/s.
Its better to reject this rather than having incorrect ratelimit.
Fixes: d2168e849ebf ("netfilter: nft_limit: add per-byte limiting")
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/nf_tables_api.c')
0 files changed, 0 insertions, 0 deletions