Andrea Claudi 473c59ab5d ipvs: check that ip_vs_conn_tab_bits is between 8 and 20 ...

[ Upstream commit 69e73dbfda ]

ip_vs_conn_tab_bits may be provided by the user through the
conn_tab_bits module parameter. If this value is greater than 31, or
less than 0, the shift operator used to derive tab_size causes undefined
behaviour.

Fix this checking ip_vs_conn_tab_bits value to be in the range specified
in ipvs Kconfig. If not, simply use default value.

Fixes: 6f7edb4881 ("IPVS: Allow boot time change of hash size")
Reported-by: Yi Chen <yiche@redhat.com>
Signed-off-by: Andrea Claudi <aclaudi@redhat.com>
Acked-by: Julian Anastasov <ja@ssi.bg>
Acked-by: Simon Horman <horms@verge.net.au>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2021-10-07 07:53:09 +02:00

..

ip_vs_app.c

ipvs: don't ignore errors in case refcounting ip_vs module fails

2019-10-24 11:53:19 +02:00

ip_vs_conn.c

ipvs: check that ip_vs_conn_tab_bits is between 8 and 20

2021-10-07 07:53:09 +02:00

ip_vs_core.c

netfilter: ipvs: A spello fix

2021-03-28 17:31:13 -07:00

ip_vs_ctl.c

ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service

2021-05-27 13:06:48 +02:00

ip_vs_dh.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

ip_vs_est.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

ip_vs_fo.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

ip_vs_ftp.c

netfilter: ipvs: do not printk on netns creation

2021-04-03 20:17:11 +02:00

ip_vs_lblc.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

ip_vs_lblcr.c

net: delete "register" keyword

2019-08-08 18:03:42 -07:00

ip_vs_lc.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

ip_vs_mh.c

netfilter: remove unnecessary spaces

2019-08-13 12:08:48 +02:00

ip_vs_nfct.c

netfilter: nf_conntrack_sip: fix expectation clash

2019-07-16 13:16:59 +02:00

ip_vs_nq.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

ip_vs_ovf.c

net: Fix various misspellings of "connect"

2019-10-28 13:41:59 -07:00

ip_vs_pe_sip.c

treewide: Add SPDX license identifier for more missed files

2019-05-21 10:50:45 +02:00

ip_vs_pe.c

ipvs: don't ignore errors in case refcounting ip_vs module fails

2019-10-24 11:53:19 +02:00

ip_vs_proto_ah_esp.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

ip_vs_proto_sctp.c

netfilter: ipvs: prefer skb_ensure_writable

2019-05-31 18:02:44 +02:00

ip_vs_proto_tcp.c

ipvs: adjust the debug info in function set_tcp_state

2020-10-20 13:54:46 +02:00

ip_vs_proto_udp.c

treewide: Use fallthrough pseudo-keyword

2020-08-23 17:36:59 -05:00

ip_vs_proto.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

ip_vs_rr.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

ip_vs_sched.c

ipvs: don't ignore errors in case refcounting ip_vs module fails

2019-10-24 11:53:19 +02:00

ip_vs_sed.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

ip_vs_sh.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

ip_vs_sync.c

ipvs: replace atomic_add_return()

2020-11-22 13:45:52 +01:00

ip_vs_twos.c

ipvs: add weighted random twos choice algorithm

2021-01-26 01:09:46 +01:00

ip_vs_wlc.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

ip_vs_wrr.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

ip_vs_xmit.c

ipvs: clear skb->tstamp in forwarding path

2020-10-12 01:59:41 +02:00

Kconfig

netfilter: Remove leading spaces in Kconfig

2021-05-29 01:04:52 +02:00

Makefile

ipvs: add weighted random twos choice algorithm

2021-01-26 01:09:46 +01:00