Re: [PATCH] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len (v3)

2014-03-30 Thread Pablo Neira Ayuso
On Fri, Mar 28, 2014 at 01:54:32PM +0400, Andrey Vagin wrote: > "len" contains sizeof(nf_ct_ext) and size of extensions. In a worst > case it can contain all extensions. Bellow you can find sizes for all > types of extensions. Their sum is definitely bigger than 256. > > nf_ct_ext_types[0]->len =

[PATCH] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len (v3)

2014-03-28 Thread Andrey Vagin
"len" contains sizeof(nf_ct_ext) and size of extensions. In a worst case it can contain all extensions. Bellow you can find sizes for all types of extensions. Their sum is definitely bigger than 256. nf_ct_ext_types[0]->len = 24 nf_ct_ext_types[1]->len = 32 nf_ct_ext_types[2]->len = 24 nf_ct_ext_t

[PATCH] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len (v2)

2014-03-27 Thread Andrey Vagin
"len" contains sizeof(nf_ct_ext) and size of extensions. In a worst case it can contain all extensions. Bellow you can find sizes for all types of extensions. Their sum is definitely bigger than 256. nf_ct_ext_types[0]->len = 24 nf_ct_ext_types[1]->len = 32 nf_ct_ext_types[2]->len = 24 nf_ct_ext_t

Re: [PATCH] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len

2014-03-27 Thread Patrick McHardy
On Thu, Mar 27, 2014 at 04:50:33PM +0100, Florian Westphal wrote: > Andrey Vagin wrote: > > "len" contains sizeof(nf_ct_ext) and size of extensions. In a worst > > case it can contain all extensions. Bellow you can find sizes for all > > types of extensions. Their sum is definitely bigger than 256

Re: [PATCH] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len

2014-03-27 Thread Florian Westphal
Andrey Vagin wrote: > "len" contains sizeof(nf_ct_ext) and size of extensions. In a worst > case it can contain all extensions. Bellow you can find sizes for all > types of extensions. Their sum is definitely bigger than 256. > > nf_ct_ext_types[0]->len = 24 > nf_ct_ext_types[1]->len = 32 > nf_ct

Re: [PATCH] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len

2014-03-27 Thread Patrick McHardy
On Thu, Mar 27, 2014 at 07:32:34PM +0400, Andrey Vagin wrote: > "len" contains sizeof(nf_ct_ext) and size of extensions. In a worst > case it can contain all extensions. Bellow you can find sizes for all > types of extensions. Their sum is definitely bigger than 256. > > nf_ct_ext_types[0]->len =

[PATCH] netfilter: nf_conntrack: reserve two bytes for nf_ct_ext->len

2014-03-27 Thread Andrey Vagin
"len" contains sizeof(nf_ct_ext) and size of extensions. In a worst case it can contain all extensions. Bellow you can find sizes for all types of extensions. Their sum is definitely bigger than 256. nf_ct_ext_types[0]->len = 24 nf_ct_ext_types[1]->len = 32 nf_ct_ext_types[2]->len = 24 nf_ct_ext_t