| commit | a0a7379e16b6e4c229d082f24c7e3ef9e812ed46 | [log] [tgz] |
|---|---|---|
| author | Pablo Neira Ayuso <pablo@netfilter.org> | Tue Jun 10 10:53:01 2014 +0200 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Mon Jun 16 13:07:44 2014 +0200 |
| tree | 5a7dc2ef6db3db90ae1a6807ebbaa6b9bdb627aa | |
| parent | 5bc5c307653cbf8fe9da6cbd8ae6c6bd5b86ff4b [diff] |
netfilter: nf_tables: use u32 for chain use counter
Since 4fefee5 ("netfilter: nf_tables: allow to delete several objects
from a batch"), every new rule bumps the chain use counter. However,
this is limited to 16 bits, which means that it will overrun after
2^16 rules.
Use a u32 chain counter and check for overflows (just like we do for
table objects).
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>