On 03.01, Carlos Falgueras García wrote: > @@ -2704,6 +2709,8 @@ static int nf_tables_newset(struct net *net, struct sock *nlsk, > u64 timeout; > u32 ktype, dtype, flags, policy, gc_int; > struct nft_set_desc desc; > + unsigned char udlen; This will overflow at size 256. Please use an explicitly sized type (u16). > + unsigned char *udata; > int err; > > if (nla[NFTA_SET_TABLE] == NULL || -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html