Liping Zhang 5ce6b04ce9 netfilter: nft_log: restrict the log prefix length to 127 ... First, log prefix will be truncated to NF_LOG_PREFIXLEN-1, i.e. 127, at nf_log_packet(), so the extra part is useless. Second, after adding a log rule with a very very long prefix, we will fail to dump the nft rules after this _special_ one, but acctually, they do exist. For example: # name_65000=$(printf "%0.sQ" {1..65000}) # nft add rule filter output log prefix "$name_65000" # nft add rule filter output counter # nft add rule filter output counter # nft list chain filter output table ip filter { chain output { type filter hook output priority 0; policy accept; } } So now, restrict the log prefix length to NF_LOG_PREFIXLEN-1. Fixes: 96518518cc ("netfilter: add nftables") Signed-off-by: Liping Zhang <zlpnobody@gmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2017-01-24 21:46:29 +01:00
..
asm-generic
drm	This pull request brings in VEC (TV-out) support for vc4, along with a	2016-12-13 12:05:12 +10:00
linux	netfilter: nft_log: restrict the log prefix length to 127	2017-01-24 21:46:29 +01:00
misc
mtd
rdma	Merge branch 'vmw_pvrdma' into merge-test	2016-12-14 14:56:21 -05:00
scsi	Add type 0x28 NVME type code to scsi fc headers	2016-12-06 10:17:03 +02:00
sound	Merge remote-tracking branches 'asoc/topic/tlv320aic31xx', 'asoc/topic/topology', 'asoc/topic/uda1380', 'asoc/topic/wm2200' and 'asoc/topic/wm8523' into asoc-next	2016-12-12 15:53:25 +00:00
video
xen
Kbuild