Jay Elliott 8b1836c4b6 netfilter: conntrack: clamp timeouts to INT_MAX
When the conntracking code multiplies a timeout by HZ, it can overflow
from positive to negative; this causes it to instantly expire.  To
protect against this the multiplication is done in 64-bit so we can
prevent it from exceeding INT_MAX.

Signed-off-by: Jay Elliott <jelliott@arista.com>
Acked-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2017-11-28 01:17:04 +01:00
..
2017-11-01 12:19:03 +09:00
2017-11-14 15:45:53 +09:00
2017-11-16 10:49:00 +09:00
2017-11-08 16:12:33 +09:00
2017-11-14 16:17:38 +09:00
2017-11-17 14:18:00 -08:00
2017-11-16 10:49:00 +09:00
2017-11-15 18:21:04 -08:00