On Fri, Oct 24, 2014 at 02:30:27PM +0200, Pablo Neira Ayuso wrote: > On Thu, Oct 23, 2014 at 10:36:06AM +0200, Florian Westphal wrote: > > We currently neither account for the nlattr size, nor do we consider > > the size of the trailing NLMSG_DONE when allocating nlmsg skb. > > > > This can result in nflog to stop working, as __nfulnl_send() re-tries > > sending forever if it failed to append NLMSG_DONE (which will never > > work if buffer is not large enough). > > Applied, thanks. BTW, I'm going to pass this to -stable, it applies cleanly starting 2.6.32 and upwards. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html