iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/net
History
Pablo Neira Ayuso edbcdafac3 netfilter: xt_cgroup: shrink size of v2 path 
[ Upstream commit 0d704967f4a49cc2212350b3e4a8231f8b4283ed ]

cgroup v2 path field is PATH_MAX which is too large, this is placing too
much pressure on memory allocation for people with many rules doing
cgroup v1 classid matching, side effects of this are bug reports like:

https://bugzilla.kernel.org/show_bug.cgi?id=200639

This patch registers a new revision that shrinks the cgroup path to 512
bytes, which is the same approach we follow in similar extensions that
have a path field.

Cc: Tejun Heo <tj@kernel.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Acked-by: Tejun Heo <tj@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2019-04-20 09:15:04 +02:00
..
6lowpan
6lowpan: iphc: reset mac_header after decompress to fix panic
2018-10-03 17:00:47 -07:00
9p
9p: do not trust pdu content for stat item size
2019-04-20 09:15:04 +02:00
802
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
8021q
net: fix use-after-free in GRO with ESP
2018-07-22 14:28:44 +02:00
appletalk
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
atm
atm: Preserve value of skb->truesize when accounting to vcc
2018-07-22 14:28:43 +02:00
ax25
ax25: fix possible use-after-free
2019-02-23 09:06:44 +01:00
batman-adv
batman-adv: fix uninit-value in batadv_interface_tx()
2019-02-27 10:08:06 +01:00
bluetooth
Bluetooth: Verify that l2cap_get_conf_opt provides large enough buffer
2019-04-03 06:25:07 +02:00
bpf
…
bridge
netfilter: physdev: relax br_netfilter dependency
2019-04-05 22:31:39 +02:00
caif
net: caif: Add a missing rcu_read_unlock() in caif_flow_cb
2018-09-05 09:26:27 +02:00
can
can: bcm: check timer values before ktime conversion
2019-01-31 08:13:46 +01:00
ceph
libceph: wait for latest osdmap in ceph_monc_blacklist_add()
2019-03-27 14:13:51 +09:00
core
net: ethtool: not call vzalloc for zero sized memory request
2019-04-17 08:37:50 +02:00
dcb
net: dcb: For wild-card lookups, use priority -1, not 0
2018-09-19 22:43:43 +02:00
dccp
dccp: do not use ipv6 header for ipv4 flow
2019-04-03 06:25:08 +02:00
decnet
dn_getsockoptdecnet: move nf_{get/set}sockopt outside sock lock
2018-02-25 11:07:52 +01:00
dns_resolver
KEYS: DNS: fix parsing multiple options
2018-07-22 14:28:49 +02:00
dsa
net: dsa: slave: Don't propagate flag changes on down slave interfaces
2019-02-12 19:46:11 +01:00
ethernet
…
hsr
net/hsr: fix possible crash in add_timer()
2019-03-19 13:13:22 +01:00
ieee802154
ieee802154: lowpan_header_create check must check daddr
2019-01-09 17:14:43 +01:00
ife
net: sched: ife: check on metadata length
2018-04-29 11:33:13 +02:00
ipv4
vrf: check accept_source_route on the original netdevice
2019-04-17 08:37:48 +02:00
ipv6
ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type
2019-04-17 08:37:50 +02:00
ipx
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
iucv
net/iucv: Free memory obtained by kzalloc
2018-03-31 18:10:41 +02:00
kcm
kcm: switch order of device registration to fix a crash
2019-04-17 08:37:45 +02:00
key
af_key: unconditionally clone on broadcast
2019-03-23 14:35:14 +01:00
l2tp
l2tp: fix infoleak in l2tp_ip6_recvmsg()
2019-03-19 13:13:22 +01:00
l3mdev
…
lapb
…
llc
llc: do not use sk_eat_skb()
2018-12-01 09:42:51 +01:00
mac80211
mac80211: Fix Tx aggregation session tear down with ITXQs
2019-03-23 14:35:12 +01:00
mac802154
net: mac802154: tx: expand tailroom if necessary
2018-09-09 19:55:52 +02:00
mpls
mpls: Return error for RTA_GATEWAY attribute
2019-03-13 14:03:09 -07:00
ncsi
net/ncsi: Fix length of GVI response packet
2017-10-21 01:56:38 +01:00
netfilter
netfilter: xt_cgroup: shrink size of v2 path
2019-04-20 09:15:04 +02:00
netlabel
netlabel: fix out-of-bounds memory accesses
2019-03-13 14:03:08 -07:00
netlink
genetlink: Fix a memory leak on error path
2019-04-03 06:25:08 +02:00
netrom
netrom: switch to sock timer API
2019-02-06 17:31:32 +01:00
nfc
net: nfc: Fix NULL dereference on nfc_llcp_build_tlv fails
2019-03-13 14:03:08 -07:00
nsh
nsh: set mac len based on inner packet
2018-07-22 14:28:49 +02:00
openvswitch
openvswitch: fix flow actions reallocation
2019-04-17 08:37:47 +02:00
packet
packets: Always register packet sk in the same order
2019-04-03 06:25:09 +02:00
phonet
phonet: fix building with clang
2019-03-23 14:35:16 +01:00
psample
MAINTAINERS: Update Yotam's E-mail
2017-11-01 12:19:03 +09:00
qrtr
net: qrtr: Broadcast messages only from control port
2018-08-24 13:09:13 +02:00
rds
net: rds: force to destroy connection if t_sock is NULL in rds_tcp_kill_sock().
2019-04-17 08:37:46 +02:00
rfkill
rfkill: gpio: fix memory leak in probe error path
2018-05-16 10:10:26 +02:00
rose
net: rose: fix a possible stack overflow
2019-04-03 06:25:08 +02:00
rxrpc
rxrpc: Fix client call queueing, waiting for channel
2019-03-19 13:13:23 +01:00
sched
net/sched: act_sample: fix divide by zero in the traffic path
2019-04-17 08:37:49 +02:00
sctp
sctp: initialize _pad of sockaddr_in before copying to user memory
2019-04-17 08:37:47 +02:00
smc
net/smc: fix TCP fallback socket release
2019-01-09 17:14:46 +01:00
strparser
strparser: Remove early eaten to fix full tcp receive buffer stall
2018-07-22 14:28:47 +02:00
sunrpc
sunrpc: fix 4 more call sites that were using stack memory with a scatterlist
2019-02-23 09:06:43 +01:00
switchdev
net: switchdev: Remove bridge bypass support from switchdev
2017-08-07 14:48:48 -07:00
tipc
tipc: fix RDM/DGRAM connect() regression
2019-03-13 14:03:07 -07:00
tls
net/tls: Fixed return value when tls_complete_pending_work() fails
2018-12-05 19:41:11 +01:00
unix
missing barriers in some of unix_sock ->addr and ->path accesses
2019-03-19 13:13:24 +01:00
vmw_vsock
vsock/virtio: reset connected sockets on device removal
2019-03-13 14:03:21 -07:00
wimax
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
wireless
cfg80211: extend range deviation for DMG
2019-03-05 17:58:02 +01:00
x25
net/x25: fix a race in x25_bind()
2019-03-19 13:13:23 +01:00
xfrm
xfrm: refine validation of template and selector families
2019-02-15 08:09:13 +01:00
compat.c
sock: Make sock->sk_stamp thread-safe
2019-01-09 17:14:46 +01:00
Kconfig
net: Remove CONFIG_NETFILTER_DEBUG and _ASSERT() macros.
2017-09-04 13:25:20 +02:00
Makefile
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
socket.c
net: socket: set sock->sk to NULL after calling proto_ops::release()
2019-03-13 14:03:09 -07:00
sysctl_net.c
…