Skip to content
Snippets Groups Projects
user avatar
Eric Dumazet authored
xt_recent can try high order page allocations and this can fail.

iptables: page allocation failure: order:9, mode:0xc0d0

It also wastes about half the allocated space because of kmalloc()
power-of-two roundups and struct recent_table layout.

Use vmalloc() instead to save space and be less prone to allocation
errors when memory is fragmented.

Reported-by: default avatarMiroslav Kratochvil <exa.exa@gmail.com>
Reported-by: default avatarDave Jones <davej@redhat.com>
Reported-by: default avatarHarald Reindl <h.reindl@thelounge.net>
Signed-off-by: default avatarEric Dumazet <edumazet@google.com>
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
2727de76
Name Last commit Last update