diff options
| author | Florian Westphal <fw@strlen.de> | 2022-08-09 16:16:35 +0300 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2022-08-11 17:51:13 +0300 |
| commit | 976bf59c69cd2e2c17f0ab20a14c0e700cba0f15 (patch) | |
| tree | 4a6581062a073e796e8e54547b8a8a8810620cc9 /lib | |
| parent | c783a29c7e5934eabac2b760571489ad83bf4fd1 (diff) | |
| download | linux-976bf59c69cd2e2c17f0ab20a14c0e700cba0f15.tar.xz | |
netfilter: nf_ct_irc: cap packet search space to 4k
This uses a pseudo-linearization scheme with a 64k global buffer,
but BIG TCP arrival means IPv6 TCP stack can generate skbs
that exceed this size.
In practice, IRC commands are not expected to exceed 512 bytes, plus
this is interactive protocol, so we should not see large packets
in practice.
Given most IRC connections nowadays use TLS so this helper could also be
removed in the near future.
Fixes: 7c4e983c4f3c ("net: allow gso_max_size to exceed 65536")
Fixes: 0fe79f28bfaf ("net: allow gro_max_size to exceed 65536")
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'lib')
0 files changed, 0 insertions, 0 deletions