While dealing with huge sets, nft may exhaust stack and trigger segfault. To avoid this, lets move those huge arrays away from stack to heap.
First patch introduces array allocation helper. Second patch modifies interval_map_decompose() function, allocating memory for arrays on head. Meny thanks to Florian Westphal who helped to sort this out. Oleksandr Natalenko (2): utils: provide array allocation wrapper segtree: allocate memory for arrays on heap include/utils.h | 1 + src/segtree.c | 8 +++++++- src/utils.c | 11 +++++++++++ 3 files changed, 19 insertions(+), 1 deletion(-) -- 2.11.0 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html
