]> asedeno.scripts.mit.edu Git - linux.git/commit
netfilter: ipset: Fix adding an IPv4 range containing more than 2^31 addresses
authorJozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Sat, 23 Sep 2017 21:37:40 +0000 (23:37 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 26 Sep 2017 18:15:04 +0000 (20:15 +0200)
commit48596a8ddc46f96afb6a2cd72787cb15d6bb01fc
treeaee6458d67c8ea60bc2287880aab5cc1430d6501
parent89fcbb564f4a64c439d597c2702f990eed49c8a1
netfilter: ipset: Fix adding an IPv4 range containing more than 2^31 addresses

Wrong comparison prevented the hash types to add a range with more than
2^31 addresses but reported as a success.

Fixes Netfilter's bugzilla id #1005, reported by Oleg Serditov and
Oliver Ford.

Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/ipset/ip_set_hash_ip.c
net/netfilter/ipset/ip_set_hash_ipmark.c
net/netfilter/ipset/ip_set_hash_ipport.c
net/netfilter/ipset/ip_set_hash_ipportip.c
net/netfilter/ipset/ip_set_hash_ipportnet.c
net/netfilter/ipset/ip_set_hash_net.c
net/netfilter/ipset/ip_set_hash_netiface.c
net/netfilter/ipset/ip_set_hash_netnet.c
net/netfilter/ipset/ip_set_hash_netport.c
net/netfilter/ipset/ip_set_hash_netportnet.c