Julian Anastasov 5fcf0cf607 ipvs: reduce stack usage for sockopt data ... Use union to reserve the required stack space for sockopt data which is less than the currently hardcoded value of 128. Now the tables for commands should be more readable. The checks added for readability are optimized by compiler, others warn at compile time if command uses too much stack or exceeds the storage of set_arglen and get_arglen. As Dan Carpenter points out, we can run for unprivileged user, so we can silent some error messages. Signed-off-by: Julian Anastasov <ja@ssi.bg> CC: Dan Carpenter <dan.carpenter@oracle.com> CC: Andrey Utkin <andrey.krieger.utkin@gmail.com> CC: David Binderman <dcb314@hotmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2014-09-09 16:31:24 +02:00
..
ipset	netfilter: ipset: Fix warn: integer overflows 'sizeof(*map) + size * set->dsize'	2014-08-24 19:33:10 +02:00
ipvs	ipvs: reduce stack usage for sockopt data	2014-09-09 16:31:24 +02:00
core.c	netfilter: don't use mutex_lock_interruptible()	2014-08-08 16:47:23 +02:00
Kconfig	netfilter: fix several Kconfig problems in NF_LOG_*	2014-06-28 18:49:49 +02:00
Makefile	netfilter: log: split family specific code to nf_log_{ip,ip6,common}.c files	2014-06-27 13:19:59 +02:00
nf_conntrack_acct.c	netfilter: introduce nf_conn_acct structure	2013-11-03 21:48:49 +01:00
nf_conntrack_amanda.c
nf_conntrack_broadcast.c
nf_conntrack_core.c	netfilter: conntrack: remove timer from ecache extension	2014-06-25 19:15:38 +02:00
nf_conntrack_ecache.c	netfilter: conntrack: remove timer from ecache extension	2014-06-25 19:15:38 +02:00
nf_conntrack_expect.c	netfilter: conntrack: seperate expect locking from nf_conntrack_lock	2014-03-07 11:41:01 +01:00
nf_conntrack_extend.c
nf_conntrack_ftp.c	netfilter: Implement RFC 1123 for FTP conntrack	2013-05-27 13:32:43 +02:00
nf_conntrack_h323_asn1.c
nf_conntrack_h323_main.c	netfilter: conntrack: seperate expect locking from nf_conntrack_lock	2014-03-07 11:41:01 +01:00
nf_conntrack_h323_types.c
nf_conntrack_helper.c	netfilter: conntrack: remove central spinlock nf_conntrack_lock	2014-03-07 11:41:13 +01:00
nf_conntrack_irc.c
nf_conntrack_l3proto_generic.c
nf_conntrack_labels.c	netfilter: connlabels: remove unneeded includes	2013-07-31 16:39:18 +02:00
nf_conntrack_netbios_ns.c
nf_conntrack_netlink.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next	2014-07-20 21:01:43 -07:00
nf_conntrack_pptp.c	netfilter: nf_conntrack: flush net_gre->keymap_list only from gre helper	2014-04-08 10:56:12 +02:00
nf_conntrack_proto.c	netfilter: nf_conntrack: remove dead code	2014-01-03 23:41:37 +01:00
nf_conntrack_proto_dccp.c	netfilter: nf_conntrack_dccp: fix skb_header_pointer API usages	2014-01-06 17:40:02 +01:00
nf_conntrack_proto_generic.c
nf_conntrack_proto_gre.c	netfilter: nf_conntrack: flush net_gre->keymap_list only from gre helper	2014-04-08 10:56:12 +02:00
nf_conntrack_proto_sctp.c
nf_conntrack_proto_tcp.c	netfilter: add SYNPROXY core/target	2013-08-28 00:27:54 +02:00
nf_conntrack_proto_udp.c
nf_conntrack_proto_udplite.c
nf_conntrack_sane.c
nf_conntrack_seqadj.c	netfilter: only warn once on wrong seqadj usage	2014-01-06 14:23:17 +01:00
nf_conntrack_sip.c	netfilter: conntrack: seperate expect locking from nf_conntrack_lock	2014-03-07 11:41:01 +01:00
nf_conntrack_snmp.c
nf_conntrack_standalone.c	net: Convert uses of typedef ctl_table to struct ctl_table	2013-06-13 02:36:09 -07:00
nf_conntrack_tftp.c
nf_conntrack_timeout.c
nf_conntrack_timestamp.c	netfilter: nf_ct_timestamp: Fix BUG_ON after netns deletion	2013-12-20 14:58:29 +01:00
nf_internals.h	net: misc: Remove extern from function prototypes	2013-10-19 19:12:11 -04:00
nf_log.c	netfilter: bridge: add generic packet logger	2014-06-27 13:20:47 +02:00
nf_log_common.c	netfilter: log: split family specific code to nf_log_{ip,ip6,common}.c files	2014-06-27 13:19:59 +02:00
nf_nat_amanda.c
nf_nat_core.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next	2014-07-20 21:01:43 -07:00
nf_nat_ftp.c
nf_nat_helper.c	netfilter: nf_conntrack: make sequence number adjustments usuable without NAT	2013-08-28 00:26:48 +02:00
nf_nat_irc.c	netfilter: nf_nat: fix access to uninitialized buffer in IRC NAT helper	2014-01-06 14:17:17 +01:00
nf_nat_proto_common.c	netfilter: use IS_ENABLED() macro	2014-06-30 11:38:03 +02:00
nf_nat_proto_dccp.c	netfilter: use IS_ENABLED() macro	2014-06-30 11:38:03 +02:00
nf_nat_proto_sctp.c	netfilter: use IS_ENABLED() macro	2014-06-30 11:38:03 +02:00
nf_nat_proto_tcp.c	netfilter: use IS_ENABLED() macro	2014-06-30 11:38:03 +02:00
nf_nat_proto_udp.c	netfilter: use IS_ENABLED() macro	2014-06-30 11:38:03 +02:00
nf_nat_proto_udplite.c	netfilter: use IS_ENABLED() macro	2014-06-30 11:38:03 +02:00
nf_nat_proto_unknown.c
nf_nat_sip.c	netfilter: nf_ct_sip: consolidate NAT hook functions	2013-10-01 12:47:09 +02:00
nf_nat_tftp.c
nf_queue.c
nf_sockopt.c	netfilter: don't use mutex_lock_interruptible()	2014-08-08 16:47:23 +02:00
nf_synproxy_core.c	netfilter: nf_conntrack: don't release a conntrack with non-zero refcnt	2014-02-05 17:46:06 +01:00
nf_tables_api.c	netfilter: nf_tables: rename nf_table_delrule_by_chain()	2014-09-09 16:31:22 +02:00
nf_tables_core.c	netfilter: nf_tables: 64bit stats need some extra synchronization	2014-07-14 12:00:17 +02:00
nf_tables_inet.c	netfilter: nf_tables: fix error path in the init functions	2014-01-09 23:25:48 +01:00
nfnetlink.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2014-05-12 13:19:14 -04:00
nfnetlink_acct.c	netfilter: nfnetlink_acct: add filter support to nfacct counter list/reset	2014-08-26 21:36:19 +02:00
nfnetlink_cthelper.c	netfilter: check return code from nla_parse_tested	2013-06-20 11:20:13 +02:00
nfnetlink_cttimeout.c	netfilter: cttimeout: allow to set/get default protocol timeouts	2013-10-01 13:17:39 +02:00
nfnetlink_log.c	netfilter: log: nf_log_packet() as real unified interface	2014-06-27 13:20:13 +02:00
nfnetlink_queue_core.c	core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors	2014-03-27 15:29:38 -04:00
nfnetlink_queue_ct.c	netfilter: nf_conntrack: make sequence number adjustments usuable without NAT	2013-08-28 00:26:48 +02:00
nft_bitwise.c	netfilter: nf_tables: expression ops overloading	2013-10-14 17:16:08 +02:00
nft_byteorder.c	netfilter: nf_tables: expression ops overloading	2013-10-14 17:16:08 +02:00
nft_cmp.c	netfilter: nf_tables: fix nft_cmp_fast failure on big endian for size < 4	2014-04-14 10:38:02 +02:00
nft_compat.c	netfilter: nft_compat: call {target, match}->destroy() to cleanup entry	2014-06-16 13:08:04 +02:00
nft_counter.c	netfilter: nf_tables: expression ops overloading	2013-10-14 17:16:08 +02:00
nft_ct.c	netfilter: nft_ct: split nft_ct_init() into two functions for get/set	2014-04-02 21:29:45 +02:00
nft_expr_template.c	netfilter: nf_tables: expression ops overloading	2013-10-14 17:16:08 +02:00
nft_exthdr.c	netfilter: nft_exthdr: call ipv6_find_hdr() with explicitly initialized offset	2013-12-20 11:25:10 +01:00
nft_hash.c	nftables: Convert nft_hash to use generic rhashtable	2014-08-02 19:49:38 -07:00
nft_immediate.c	netfilter: nf_tables: restore context for expression destructors	2014-03-08 12:35:17 +01:00
nft_limit.c	netfilter: nf_tables: expression ops overloading	2013-10-14 17:16:08 +02:00
nft_log.c	netfilter: nft_log: fix coccinelle warnings	2014-06-29 13:55:08 +02:00
nft_lookup.c	netfilter: nf_tables: use new transaction infrastructure to handle sets	2014-05-19 12:06:10 +02:00
nft_meta.c	netfilter: nf_tables: add devgroup support in meta expresion	2014-09-09 16:31:23 +02:00
nft_nat.c	netfilter: nft_nat: don't dump port information if unset	2014-06-16 13:08:14 +02:00
nft_payload.c	netfilter: nf_tables: check if payload length is a power of 2	2014-02-17 11:21:17 +01:00
nft_queue.c	netfilter: nf_tables: fix log/queue expressions for NFPROTO_INET	2014-02-06 11:41:38 +01:00
nft_rbtree.c	netfilter: nft_rbtree: introduce locking	2014-06-02 10:54:31 +02:00
nft_reject.c	netfilter: nft_reject: split up reject module into IPv4 and IPv6 specifc parts	2014-02-06 09:44:10 +01:00
nft_reject_inet.c	netfilter: nft_reject_inet: fix unintended fall-through in switch-statatement	2014-02-14 11:37:33 +01:00
x_tables.c	netfilter: don't use mutex_lock_interruptible()	2014-08-08 16:47:23 +02:00
xt_addrtype.c	netfilter: xt_addrtype: fix trivial typo	2013-07-31 16:36:25 +02:00
xt_AUDIT.c	netfilter: Convert uses of __constant_<foo> to <foo>	2014-03-13 14:13:19 +01:00
xt_bpf.c	net: filter: split 'struct sk_filter' into socket and bpf parts	2014-08-02 15:03:58 -07:00
xt_cgroup.c	netfilter: x_tables: allow to use cgroup match for LOCAL_IN nf hooks	2014-04-03 23:52:17 +02:00
xt_CHECKSUM.c
xt_CLASSIFY.c
xt_cluster.c
xt_comment.c
xt_connbytes.c	netfilter: introduce nf_conn_acct structure	2013-11-03 21:48:49 +01:00
xt_connlabel.c
xt_connlimit.c	netfilter: connlimit: move lock array out of struct connlimit_data	2014-04-03 23:52:13 +02:00
xt_connmark.c	netfilter: Fix FSF address in file headers	2013-12-06 12:37:57 -05:00
xt_CONNSECMARK.c
xt_conntrack.c
xt_cpu.c
xt_CT.c	netfilter: nf_conntrack: don't release a conntrack with non-zero refcnt	2014-02-05 17:46:06 +01:00
xt_dccp.c
xt_devgroup.c
xt_DSCP.c
xt_dscp.c
xt_ecn.c
xt_esp.c
xt_hashlimit.c	netfilter: xt_hashlimit: perform garbage collection from process context	2014-07-24 13:07:25 +02:00
xt_helper.c
xt_hl.c
xt_HL.c
xt_HMARK.c
xt_IDLETIMER.c
xt_ipcomp.c	netfilter: xt_ipcomp: Use ntohs to ease sparse warning	2014-02-19 11:41:25 +01:00
xt_iprange.c
xt_ipvs.c
xt_l2tp.c	netfilter: introduce l2tp match extension	2014-01-09 21:36:39 +01:00
xt_LED.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2014-08-05 18:46:26 -07:00
xt_length.c
xt_limit.c
xt_LOG.c	netfilter: xt_LOG: add missing string format in nf_log_packet()	2014-06-28 18:50:35 +02:00
xt_mac.c
xt_mark.c
xt_multiport.c
xt_nat.c
xt_NETMAP.c
xt_nfacct.c	netfilter: nfnetlink_acct: Adding quota support to accounting framework	2014-04-29 18:25:14 +02:00
xt_NFLOG.c	netfilter: log: netns NULL ptr bug when calling from conntrack	2013-05-15 14:11:07 +02:00
xt_NFQUEUE.c	netfilter: xt_NFQUEUE: separate reusable code	2013-12-07 23:20:45 +01:00
xt_osf.c	netfilter: Add {ipt,ip6t}_osf aliases for xt_osf	2014-04-03 23:52:22 +02:00
xt_owner.c
xt_physdev.c
xt_pkttype.c
xt_policy.c
xt_quota.c
xt_RATEEST.c	Revert "netfilter: avoid get_random_bytes calls"	2014-01-06 14:00:55 +01:00
xt_rateest.c	net_sched: add 64bit rate estimators	2013-06-11 02:51:03 -07:00
xt_realm.c
xt_recent.c	net: use the new API kvfree()	2014-06-05 00:49:51 -07:00
xt_REDIRECT.c
xt_repldata.h	net: netfilter: LLVMLinux: vlais-netfilter	2014-06-07 11:44:39 -07:00
xt_sctp.c
xt_SECMARK.c
xt_set.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial	2013-11-15 16:47:22 -08:00
xt_socket.c	netfilter: xt_socket: use sock_gen_put()	2013-10-17 10:27:25 +02:00
xt_state.c
xt_statistic.c	net: replace macros net_random and net_srandom with direct calls to prandom	2014-01-14 15:15:25 -08:00
xt_string.c
xt_TCPMSS.c	netfilter: xt_TCPMSS: lookup route from proper net namespace	2013-09-27 16:18:23 +02:00
xt_tcpmss.c
xt_TCPOPTSTRIP.c	netfilter: xt_TCPOPTSTRIP: fix possible off by one access	2013-08-01 11:45:15 +02:00
xt_tcpudp.c
xt_TEE.c	net: pass info struct via netdevice notifier	2013-05-28 13:11:01 -07:00
xt_time.c
xt_TPROXY.c	ipv6: make lookups simpler and faster	2013-10-09 00:01:25 -04:00
xt_TRACE.c
xt_u32.c