While dealing with huge sets, nft may exhaust stack
and trigger segfault. To avoid this, lets move those
huge arrays away from stack to heap.
First patch introduces array allocation helper.
Second patch modifies interval_map_decompose()
function, allocating memory for arrays on head.
Meny thanks to Florian Westphal who helped
to sort this out.
Changelog:
v2: nmemb actually can be 0, so remove that
assertion
v1: initial submission
Oleksandr Natalenko (2):
utils: provide array allocation wrapper
segtree: allocate memory for arrays on heap
include/utils.h | 1 +
src/segtree.c | 8 +++++++-
src/utils.c | 10 ++++++++++
3 files changed, 18 insertions(+), 1 deletion(-)
--
2.11.0
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to [email protected]
More majordomo info at http://vger.kernel.org/majordomo-info.html
