diff options
| author | Jozsef Kadlecsik <kadlec@netfilter.org> | 2022-12-30 13:24:37 +0100 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2023-01-12 12:02:26 +0100 |
| commit | 080b56c66acad21616140ef3091d72ccb0674465 (patch) | |
| tree | 543bb160b159a017225d14e5d7bac156dbea9b7d /include | |
| parent | 2bab138b44f0072433db40a14d75fe208d17732b (diff) | |
| download | linux-080b56c66acad21616140ef3091d72ccb0674465.tar.gz linux-080b56c66acad21616140ef3091d72ccb0674465.tar.bz2 linux-080b56c66acad21616140ef3091d72ccb0674465.zip | |
netfilter: ipset: fix hash:net,port,net hang with /0 subnet
[ Upstream commit a31d47be64b9b74f8cfedffe03e0a8a1f9e51f23 ]
The hash:net,port,net set type supports /0 subnets. However, the patch
commit 5f7b51bf09baca8e titled "netfilter: ipset: Limit the maximal range
of consecutive elements to add/delete" did not take into account it and
resulted in an endless loop. The bug is actually older but the patch
5f7b51bf09baca8e brings it out earlier.
Handle /0 subnets properly in hash:net,port,net set types.
Fixes: 5f7b51bf09ba ("netfilter: ipset: Limit the maximal range of consecutive elements to add/delete")
Reported-by: Марк Коренберг <socketpair@gmail.com>
Signed-off-by: Jozsef Kadlecsik <kadlec@netfilter.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions