Florian Westphal cdb436d181 netfilter: conntrack: avoid excess memory allocation ...

This is now a fixed-size extension, so we don't need to pass a variable
alloc size.  This (harmless) error results in allocating 32 instead of
the needed 16 bytes for this extension as the size gets passed twice.

Fixes: 23014011ba ("netfilter: conntrack: support a fixed size of 128 distinct labels")
Signed-off-by: Florian Westphal <[email protected]>
Signed-off-by: Pablo Neira Ayuso <[email protected]>

2016-10-27 18:29:02 +02:00

..

ipv4

ipv4: Push struct net down into nf_send_reset

2015-09-29 20:21:31 +02:00

ipv6

netfilter: ipv6: avoid nf_iterate recursion

2015-11-23 17:54:45 +01:00

br_netfilter.h

netfilter: bridge: add and use br_nf_hook_thresh

2016-09-24 21:25:48 +02:00

nf_conntrack_acct.h

netfilter: introduce nf_conn_acct structure

2013-11-03 21:48:49 +01:00

nf_conntrack_core.h

netfilter: conntrack: simplify the code by using nf_conntrack_get_ht

2016-08-18 01:20:52 +02:00

nf_conntrack_ecache.h

netfilter: don't rely on DYING bit to detect when destroy event was sent

2016-08-30 11:43:08 +02:00

nf_conntrack_expect.h

netfilter: conntrack: use a single expectation table for all namespaces

2016-05-06 11:50:01 +02:00

nf_conntrack_extend.h

netfilter: move nat hlist_head to nf_conn

2016-07-11 11:47:50 +02:00

nf_conntrack_helper.h

netfilter: Add helper array register/unregister functions

2016-07-21 02:31:53 +02:00

nf_conntrack_l3proto.h

netfilter: nf_conntrack: remove unused ctl_table_path member in nf_conntrack_l3proto

2016-09-09 16:17:58 +02:00

nf_conntrack_l4proto.h

netfilter: remove ip_conntrack* sysctl compat code

2016-08-13 13:27:13 +02:00

nf_conntrack_labels.h

netfilter: conntrack: avoid excess memory allocation

2016-10-27 18:29:02 +02:00

nf_conntrack_seqadj.h

netfilter: Remove extern from function prototypes

2013-09-23 16:29:42 -04:00

nf_conntrack_synproxy.h

netfilter: synproxy: Check oom when adding synproxy and seqadj ct extensions

2016-09-13 10:50:56 +02:00

nf_conntrack_timeout.h

netfilter: cttimeout: add netns support

2015-12-14 12:48:58 +01:00

nf_conntrack_timestamp.h

netfilter: Remove extern from function prototypes

2013-09-23 16:29:42 -04:00

nf_conntrack_tuple.h

…

nf_conntrack_zones.h

netfilter: move zone info into struct nf_conn

2016-06-23 13:33:12 +02:00

nf_conntrack.h

netfilter: remove __nf_ct_kill_acct helper

2016-08-30 11:43:10 +02:00

nf_dup_netdev.h

netfilter: nf_tables: add packet duplication to the netdev family

2016-01-03 21:04:23 +01:00

nf_log.h

netfilter: nft_log: complete NFTA_LOG_FLAGS attr support

2016-09-25 23:16:43 +02:00

nf_nat_core.h

netfilter: Pass net into nf_xfrm_me_harder

2015-09-18 22:00:22 +02:00

nf_nat_helper.h

netfilter: Remove extern from function prototypes

2013-09-23 16:29:42 -04:00

nf_nat_l3proto.h

netfilter: Pass priv instead of nf_hook_ops to netfilter hooks

2015-09-18 22:00:16 +02:00

nf_nat_l4proto.h

netfilter: Remove extern from function prototypes

2013-09-23 16:29:42 -04:00

nf_nat_redirect.h

netfilter: combine IPv4 and IPv6 nf_nat_redirect code in one module

2014-11-27 13:08:42 +01:00

nf_nat.h

netfilter: nat: convert nat bysrc hash to rhashtable

2016-07-11 12:07:57 +02:00

nf_queue.h

netfilter: replace list_head with single linked list

2016-09-25 14:38:48 +02:00

nf_tables_core.h

netfilter: nf_tables: add range expression

2016-09-25 23:16:42 +02:00

nf_tables_ipv4.h

netfilter: merge fixup for "nf_tables_netdev: remove redundant ip_hdr assignment"

2016-10-05 20:25:48 -04:00

nf_tables_ipv6.h

netfilter: nf_tables: don't drop IPv6 packets that cannot parse transport

2016-09-12 18:52:32 +02:00

nf_tables.h

netfilter: nf_tables: fix type mismatch with error return from nft_parse_u32_check

2016-10-27 18:29:01 +02:00

nfnetlink_log.h

…

nft_dup.h

netfilter: nf_tables: add nft_dup expression

2015-08-07 11:49:49 +02:00

nft_masq.h

netfilter: nft_masq: support port range

2016-03-02 20:05:27 +01:00

nft_meta.h

netfilter: nft_meta: improve the validity check of pkttype set expr

2016-08-25 13:12:03 +02:00

nft_redir.h

netfilter: nf_tables: add new expression nft_redir

2014-10-27 22:49:39 +01:00

nft_reject.h

netfilter: nft_reject: restrict to INPUT/FORWARD/OUTPUT

2016-08-25 12:55:34 +02:00

xt_rateest.h

netfilter: Remove extern from function prototypes

2013-09-23 16:29:42 -04:00