From: Josh Grebe <[EMAIL PROTECTED]>
Date: Wed, 17 Aug 2005 08:06:06 -0500

> I threw a little printk patch at Jason and we determined that to be 
> correct. In do_netfilter_replace(), on about line 2924, the call
>         krepl = (struct ipt_replace *)kmalloc(kreplsize, GFP_KERNEL);
> results in krepl being NULL after a pile of rules have been added.
> 
> I compiled a statically linked iptables binary and Jason was able to 
> add over 7k rules before he stopped it, the 32 bit iptables bombs 
> before 900 rules.
> 
> As far as changing this behaviour, I plead ignorance.

So how large was kreplsize in the failing call?
-
To unsubscribe from this list: send the line "unsubscribe sparclinux" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to