Re: [PATCH nf] netfilter: nft_socket: remove WARN_ON_ONCE with giant cgroup tree

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> wrote:
> syzbot managed to reach this WARN_ON_ONCE with a giant cgroup tree,
> remove it.
> 
>   WARNING: CPU: 0 PID: 5853 at net/netfilter/nft_socket.c:220 nft_socket_init+0x2f4/0x3d0 net/netfilter/nft_socket.c:220

I looked at the repro and as far as i could see it just passes
a large NFTA_SOCKET_LEVEL attribute value.

I'd propose:

syzbot managed to reach this WARN_ON_ONCE by passing a huge level
value, remove it.

Patch is correct though.

Acked-by: Florian Westphal <fw@xxxxxxxxx>




[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux