diff options
| author | Jesse Gross <jesse@nicira.com> | 2013-03-12 12:36:03 -0700 |
|---|---|---|
| committer | Jesse Gross <jesse@nicira.com> | 2013-03-12 13:23:48 -0700 |
| commit | 1f3050b88836cf8bc787d38447778d38a787bc8d (patch) | |
| tree | 65f464798edad4b84ad75f6ec32627ea7516d6cc | |
| parent | 4458fc9b1394cc32d48a5a7b3cafa20e3bbe8362 (diff) | |
datapath: Reduce loop limit by one to 4.
We currently allow five trips through the kernel datapath
before dropping the packet to protect the stack. However, there
have been a few reports recently involving tunneling that this is
still too much. Although it's not a complete solution, this reduces
the limit by one to balance safety in common situations with
flexibility.
Bug #15477
Reported-by: Paul Ingram <paul@nicira.com>
Reported-by: 謝秉融 <faithfulman@gmail.com>
Signed-off-by: Jesse Gross <jesse@nicira.com>
Acked-by: Pravin B Shelar <pshelar@nicira.com>
| -rw-r--r-- | datapath/actions.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/datapath/actions.c b/datapath/actions.c index bc126a7f..0dac6586 100644 --- a/datapath/actions.c +++ b/datapath/actions.c @@ -532,7 +532,7 @@ static int do_execute_actions(struct datapath *dp, struct sk_buff *skb, /* We limit the number of times that we pass into execute_actions() * to avoid blowing out the stack in the event that we have a loop. */ -#define MAX_LOOPS 5 +#define MAX_LOOPS 4 struct loop_counter { u8 count; /* Count. */ |