|
37 | 37 | #endif
|
38 | 38 |
|
39 | 39 | #define NFULNL_NLBUFSIZ_DEFAULT NLMSG_GOODSIZE
|
40 |
| -#define NFULNL_TIMEOUT_DEFAULT 100 /* every second */ |
| 40 | +#define NFULNL_TIMEOUT_DEFAULT HZ /* every second */ |
41 | 41 | #define NFULNL_QTHRESH_DEFAULT 100 /* 100 packets */
|
| 42 | +#define NFULNL_COPY_RANGE_MAX 0xFFFF /* max packet size is limited by 16-bit struct nfattr nfa_len field */ |
42 | 43 |
|
43 | 44 | #define PRINTR(x, args...) do { if (net_ratelimit()) \
|
44 | 45 | printk(x, ## args); } while (0);
|
@@ -171,7 +172,7 @@ instance_create(u_int16_t group_num, int pid)
|
171 | 172 | inst->flushtimeout = NFULNL_TIMEOUT_DEFAULT;
|
172 | 173 | inst->nlbufsiz = NFULNL_NLBUFSIZ_DEFAULT;
|
173 | 174 | inst->copy_mode = NFULNL_COPY_PACKET;
|
174 |
| - inst->copy_range = 0xffff; |
| 175 | + inst->copy_range = NFULNL_COPY_RANGE_MAX; |
175 | 176 |
|
176 | 177 | hlist_add_head(&inst->hlist,
|
177 | 178 | &instance_table[instance_hashfn(group_num)]);
|
@@ -235,11 +236,8 @@ nfulnl_set_mode(struct nfulnl_instance *inst, u_int8_t mode,
|
235 | 236 |
|
236 | 237 | case NFULNL_COPY_PACKET:
|
237 | 238 | inst->copy_mode = mode;
|
238 |
| - /* we're using struct nlattr which has 16bit nfa_len */ |
239 |
| - if (range > 0xffff) |
240 |
| - inst->copy_range = 0xffff; |
241 |
| - else |
242 |
| - inst->copy_range = range; |
| 239 | + inst->copy_range = min_t(unsigned int, |
| 240 | + range, NFULNL_COPY_RANGE_MAX); |
243 | 241 | break;
|
244 | 242 |
|
245 | 243 | default:
|
|
0 commit comments