Pablo Neira Ayuso a0a7379e16 netfilter: nf_tables: use u32 for chain use counter ... Since 4fefee5 ("netfilter: nf_tables: allow to delete several objects from a batch"), every new rule bumps the chain use counter. However, this is limited to 16 bits, which means that it will overrun after 2^16 rules. Use a u32 chain counter and check for overflows (just like we do for table objects). Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2014-06-16 13:07:44 +02:00
..
ipv4
ipv6
nf_conntrack.h	netfilter: conntrack: spinlock per cpu to protect special lists.	2014-03-07 11:40:38 +01:00
nf_conntrack_acct.h
nf_conntrack_core.h	netfilter: conntrack: remove central spinlock nf_conntrack_lock	2014-03-07 11:41:13 +01:00
nf_conntrack_ecache.h
nf_conntrack_expect.h
nf_conntrack_extend.h	netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len	2014-04-03 23:52:31 +02:00
nf_conntrack_helper.h
nf_conntrack_l3proto.h
nf_conntrack_l4proto.h
nf_conntrack_labels.h	netfilter: nft_ct: labels get support	2014-02-19 11:41:25 +01:00
nf_conntrack_seqadj.h
nf_conntrack_synproxy.h
nf_conntrack_timeout.h
nf_conntrack_timestamp.h
nf_conntrack_tuple.h
nf_conntrack_zones.h
nf_log.h
nf_nat.h	netfilter: add helper for adding nat extension	2014-04-29 20:56:22 +02:00
nf_nat_core.h
nf_nat_helper.h
nf_nat_l3proto.h
nf_nat_l4proto.h
nf_queue.h
nf_tables.h	netfilter: nf_tables: use u32 for chain use counter	2014-06-16 13:07:44 +02:00
nf_tables_core.h	netfilter: nf_tables: fix nft_cmp_fast failure on big endian for size < 4	2014-04-14 10:38:02 +02:00
nf_tables_ipv4.h
nf_tables_ipv6.h
nfnetlink_log.h
nfnetlink_queue.h
nft_meta.h	netfilter: nf_tables: Make meta expression core functions public	2014-04-23 13:55:30 +02:00
nft_reject.h
xt_log.h
xt_rateest.h