Doug / smarc-fsl-linux-kernel

Download as
Browse Code ยป

Commit cbebc51f7b77d26ec23145d6ef22ac2b209f7955

Authored by Eric Dumazet
Committed by David S. Miller
1 parent 9ab4c954ce
Exists in master and in 7 other branches imx_3.0.35_4.1.0, imx_3.10.17_1.0.1_ga, imx_3.10.53_1.1.0_ga, imx_3.14.28_1.0.0_ga, smarc-imx_3.10.53_1.1.0_ga, smarc-imx_3.14.28_1.0.0_ga, smarc-l5.0.0_1.0.0-ga

[NETFILTER]: xt_hashlimit should use time_after_eq() 

In order to avoid jiffies wraparound and its effect, special care must
be taken
when doing comparisons ...

Signed-off-by: Eric Dumazet <dada1@cosmosbay.com>
Acked-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

Showing 1 changed file with 1 additions and 1 deletions Side-by-side Diff

net/netfilter/xt_hashlimit.c
Diff comments   View file @ cbebc51
... ... @@ -240,7 +240,7 @@
240 240 static bool select_gc(const struct xt_hashlimit_htable *ht,
241 241 const struct dsthash_ent *he)
242 242 {
243   - return jiffies >= he->expires;
  243 + return time_after_eq(jiffies, he->expires);
244 244 }
245 245  
246 246 static void htable_selective_cleanup(struct xt_hashlimit_htable *ht,