| commit | 92f73221f9e9e143d242e3eca9c512dac969765e | [log] [tgz] |
|---|---|---|
| author | Gao Feng <fgao@ikuai8.com> | Fri Mar 24 21:32:19 2017 +0800 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Thu Apr 06 18:32:16 2017 +0200 |
| tree | 9c493bd487511b3230393788568bfe3ae3ae81a2 | |
| parent | f323d9546927a012cafbb7e503e6aa0e9fbff94b [diff] |
netfilter: expect: Make sure the max_expected limit is effective Because the type of expecting, the member of nf_conn_help, is u8, it would overflow after reach U8_MAX(255). So it doesn't work when we configure the max_expected exceeds 255 with expect policy. Now add the check for max_expected. Return the -EINVAL when it exceeds the limit. Signed-off-by: Gao Feng <fgao@ikuai8.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>