linux-xiaomi-chiron/include/linux/netfilter
Florian Westphal 3e5e524ffb netfilter: CONFIG_COMPAT: allow delta to exceed 32767
with 32 bit userland and 64 bit kernels, it is unlikely but possible
that insertion of new rules fails even tough there are only about 2000
iptables rules.

This happens because the compat delta is using a short int.
Easily reproducible via "iptables -m limit" ; after about 2050
rules inserting new ones fails with -ELOOP.

Note that compat_delta included 2 bytes of padding on x86_64, so
structure size remains the same.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
2010-02-15 18:17:10 +01:00
..
Kbuild netfilter: xtables: add CT target 2010-02-03 17:17:06 +01:00
nf_conntrack_amanda.h
nf_conntrack_common.h netfilter: nf_conntrack: support conntrack templates 2010-02-03 14:40:17 +01:00
nf_conntrack_dccp.h
nf_conntrack_ftp.h net: cleanup include/linux 2009-11-04 09:50:58 -08:00
nf_conntrack_h323.h
nf_conntrack_h323_asn1.h
nf_conntrack_h323_types.h
nf_conntrack_irc.h
nf_conntrack_pptp.h
nf_conntrack_proto_gre.h netfilter: netns nf_conntrack: GRE conntracking in netns 2008-10-08 11:35:10 +02:00
nf_conntrack_sane.h
nf_conntrack_sctp.h net: cleanup include/linux 2009-11-04 09:50:58 -08:00
nf_conntrack_sip.h netfilter: nf_conntrack_sip: add T.38 FAX support 2010-02-11 12:30:21 +01:00
nf_conntrack_tcp.h Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/nf-next-2.6 2009-12-03 13:23:12 -08:00
nf_conntrack_tftp.h
nf_conntrack_tuple_common.h
nfnetlink.h netfilter: nfnetlink: netns support 2010-01-13 16:02:14 +01:00
nfnetlink_compat.h net: cleanup include/linux 2009-11-04 09:50:58 -08:00
nfnetlink_conntrack.h netfilter: ctnetlink: add zone support 2010-02-15 18:14:57 +01:00
nfnetlink_log.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
nfnetlink_queue.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
x_tables.h netfilter: CONFIG_COMPAT: allow delta to exceed 32767 2010-02-15 18:17:10 +01:00
xt_CLASSIFY.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_cluster.h netfilter: xt_cluster: fix use of cluster match with 32 nodes 2009-05-05 17:46:07 +02:00
xt_comment.h
xt_connbytes.h net: cleanup include/linux 2009-11-04 09:50:58 -08:00
xt_connlimit.h
xt_CONNMARK.h netfilter: xtables: remove xt_CONNMARK v0 2009-08-10 12:25:11 +02:00
xt_connmark.h netfilter: xtables: remove xt_connmark v0 2009-08-10 12:25:12 +02:00
xt_CONNSECMARK.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_conntrack.h netfilter: xtables: remove xt_conntrack v0 2009-08-10 13:09:44 +02:00
xt_CT.h netfilter: nf_conntrack: add support for "conntrack zones" 2010-02-15 18:13:33 +01:00
xt_dccp.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_dscp.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_DSCP.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_esp.h net: cleanup include/linux 2009-11-04 09:50:58 -08:00
xt_hashlimit.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_helper.h
xt_iprange.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_LED.h netfilter: add missing linux/types.h include to xt_LED.h 2009-05-05 14:31:12 +02:00
xt_length.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_limit.h Merge branch 'header-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip 2009-03-26 16:11:41 -07:00
xt_mac.h
xt_mark.h netfilter: xtables: remove xt_mark v0 2009-08-10 13:09:45 +02:00
xt_MARK.h netfilter: xtables: remove xt_MARK v0, v1 2009-08-10 12:25:12 +02:00
xt_multiport.h net: cleanup include/linux 2009-11-04 09:50:58 -08:00
xt_NFLOG.h Merge commit 'v2.6.29' into core/header-fixes 2009-03-26 18:29:40 +01:00
xt_NFQUEUE.h netfilter: xt_NFQUEUE: queue balancing support 2009-06-05 13:24:24 +02:00
xt_osf.h netfilter: headers_check fix: linux/netfilter/xt_osf.h 2009-06-29 14:28:27 +02:00
xt_owner.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_physdev.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_pkttype.h
xt_policy.h net: cleanup include/linux 2009-11-04 09:50:58 -08:00
xt_quota.h netfilter: xtables: avoid pointer to self 2009-03-16 15:35:29 +01:00
xt_rateest.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_RATEEST.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_realm.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_recent.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_sctp.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_SECMARK.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_socket.h netfilter: xt_socket: added new revision of the 'socket' match supporting flags 2009-06-09 15:16:34 +02:00
xt_state.h net: cleanup include/linux 2009-11-04 09:50:58 -08:00
xt_statistic.h Merge branch 'header-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip 2009-03-26 16:11:41 -07:00
xt_string.h net: cleanup include/linux 2009-11-04 09:50:58 -08:00
xt_tcpmss.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_TCPMSS.h make netfilter use strict integer types 2009-03-26 18:14:20 +01:00
xt_TCPOPTSTRIP.h
xt_tcpudp.h net: cleanup include/linux 2009-11-04 09:50:58 -08:00
xt_time.h
xt_TPROXY.h netfilter: iptables TPROXY target 2008-10-08 11:35:12 +02:00
xt_u32.h