Oleksandr Natalenko <oleksandr@xxxxxxxxxxxxxx> wrote: > While dealing with huge sets, nft may exhaust stack > and trigger segfault. To avoid this, lets move those > huge arrays away from stack to heap. > > First patch introduces array allocation helper. > > Second patch modifies interval_map_decompose() > function, allocating memory for arrays on head. > > Meny thanks to Florian Westphal who helped > to sort this out. Applied, thanks a lot! I used v1 of first patch (retaining assert() of nmemb) and added an early return on v2 so decompose step doesn't do anything on empty arrays, let me know if you spot a problem with it. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
