I'm not a great fan of over-eager extra code to stop people from configuring
really silly (but harmless) things - but I do understand that the Linux
kernel code might explode if fed large integers, and so we want to cap
that userland-side...
Haven't tested this beyond "it does what it says" plus BB-all-green.
I understand that this is needed in 2.7 as well, so backported - it needed
some convincing (2.7 wasn't using atoi_constrained() at this place, but
it exists, so the patch changes the "keepalive" parsing to use that)
Your patch has been applied to the master and release/2.7 branch.
commit d9e9ec2d289e9a3c44144d4972ffe8e1fbe55978 (master)
commit 5d8cb7076108e77c049ff8e91cede207a052fb62 (release/2.7)
Author: Marco Baffo
Date: Wed Jul 22 22:52:05 2026 +0200
options: limit ping and keepalive values to one day
Signed-off-by: Marco Baffo <[email protected]>
Acked-by: Frank Lichtenheld <[email protected]>
Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1798
Message-Id: <[email protected]>
URL:
https://www.mail-archive.com/[email protected]/msg37792.html
Signed-off-by: Gert Doering <[email protected]>
--
kind regards,
Gert Doering
_______________________________________________
Openvpn-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-devel
