tree 6a2dc3296569b3e4d49e473fb5410ba5ec3b4c69
parent 7bd1fc78261120ad478cd47a4a0e955e06f7bc28
author Cong Wang <xiyou.wangcong@gmail.com> 1580704253 -0800
committer Greg Kroah-Hartman <gregkh@linuxfoundation.org> 1582900976 +0100

netfilter: xt_hashlimit: limit the max size of hashtable

commit 8d0015a7ab76b8b1e89a3e5f5710a6e5103f2dd5 upstream.

The user-specified hashtable size is unbound, this could
easily lead to an OOM or a hung task as we hold the global
mutex while allocating and initializing the new hashtable.

Add a max value to cap both cfg->size and cfg->max, as
suggested by Florian.

Reported-and-tested-by: syzbot+adf6c6c2be1c3a718121@syzkaller.appspotmail.com
Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
Reviewed-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>