[NETFILTER]: Fix timeout sysctls on big-endian 64bit architectures
The connection tracking timeout variables are unsigned long, but proc_dointvec_jiffies is used with sizeof(unsigned int) in the sysctl tables. Since there is no proc_doulongvec_jiffies function, change the timeout variables to unsigned int. Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
committed by
David S. Miller
parent
9d28026b7e
commit
babbdb1a18
@@ -17,7 +17,7 @@
|
||||
#include <linux/netfilter.h>
|
||||
#include <net/netfilter/nf_conntrack_protocol.h>
|
||||
|
||||
unsigned long nf_ct_generic_timeout = 600*HZ;
|
||||
unsigned int nf_ct_generic_timeout = 600*HZ;
|
||||
|
||||
static int generic_pkt_to_tuple(const struct sk_buff *skb,
|
||||
unsigned int dataoff,
|
||||
|
@@ -62,15 +62,15 @@ static const char *sctp_conntrack_names[] = {
|
||||
#define HOURS * 60 MINS
|
||||
#define DAYS * 24 HOURS
|
||||
|
||||
static unsigned long nf_ct_sctp_timeout_closed = 10 SECS;
|
||||
static unsigned long nf_ct_sctp_timeout_cookie_wait = 3 SECS;
|
||||
static unsigned long nf_ct_sctp_timeout_cookie_echoed = 3 SECS;
|
||||
static unsigned long nf_ct_sctp_timeout_established = 5 DAYS;
|
||||
static unsigned long nf_ct_sctp_timeout_shutdown_sent = 300 SECS / 1000;
|
||||
static unsigned long nf_ct_sctp_timeout_shutdown_recd = 300 SECS / 1000;
|
||||
static unsigned long nf_ct_sctp_timeout_shutdown_ack_sent = 3 SECS;
|
||||
static unsigned int nf_ct_sctp_timeout_closed = 10 SECS;
|
||||
static unsigned int nf_ct_sctp_timeout_cookie_wait = 3 SECS;
|
||||
static unsigned int nf_ct_sctp_timeout_cookie_echoed = 3 SECS;
|
||||
static unsigned int nf_ct_sctp_timeout_established = 5 DAYS;
|
||||
static unsigned int nf_ct_sctp_timeout_shutdown_sent = 300 SECS / 1000;
|
||||
static unsigned int nf_ct_sctp_timeout_shutdown_recd = 300 SECS / 1000;
|
||||
static unsigned int nf_ct_sctp_timeout_shutdown_ack_sent = 3 SECS;
|
||||
|
||||
static unsigned long * sctp_timeouts[]
|
||||
static unsigned int * sctp_timeouts[]
|
||||
= { NULL, /* SCTP_CONNTRACK_NONE */
|
||||
&nf_ct_sctp_timeout_closed, /* SCTP_CONNTRACK_CLOSED */
|
||||
&nf_ct_sctp_timeout_cookie_wait, /* SCTP_CONNTRACK_COOKIE_WAIT */
|
||||
|
@@ -93,21 +93,21 @@ static const char *tcp_conntrack_names[] = {
|
||||
#define HOURS * 60 MINS
|
||||
#define DAYS * 24 HOURS
|
||||
|
||||
unsigned long nf_ct_tcp_timeout_syn_sent = 2 MINS;
|
||||
unsigned long nf_ct_tcp_timeout_syn_recv = 60 SECS;
|
||||
unsigned long nf_ct_tcp_timeout_established = 5 DAYS;
|
||||
unsigned long nf_ct_tcp_timeout_fin_wait = 2 MINS;
|
||||
unsigned long nf_ct_tcp_timeout_close_wait = 60 SECS;
|
||||
unsigned long nf_ct_tcp_timeout_last_ack = 30 SECS;
|
||||
unsigned long nf_ct_tcp_timeout_time_wait = 2 MINS;
|
||||
unsigned long nf_ct_tcp_timeout_close = 10 SECS;
|
||||
unsigned int nf_ct_tcp_timeout_syn_sent = 2 MINS;
|
||||
unsigned int nf_ct_tcp_timeout_syn_recv = 60 SECS;
|
||||
unsigned int nf_ct_tcp_timeout_established = 5 DAYS;
|
||||
unsigned int nf_ct_tcp_timeout_fin_wait = 2 MINS;
|
||||
unsigned int nf_ct_tcp_timeout_close_wait = 60 SECS;
|
||||
unsigned int nf_ct_tcp_timeout_last_ack = 30 SECS;
|
||||
unsigned int nf_ct_tcp_timeout_time_wait = 2 MINS;
|
||||
unsigned int nf_ct_tcp_timeout_close = 10 SECS;
|
||||
|
||||
/* RFC1122 says the R2 limit should be at least 100 seconds.
|
||||
Linux uses 15 packets as limit, which corresponds
|
||||
to ~13-30min depending on RTO. */
|
||||
unsigned long nf_ct_tcp_timeout_max_retrans = 5 MINS;
|
||||
unsigned int nf_ct_tcp_timeout_max_retrans = 5 MINS;
|
||||
|
||||
static unsigned long * tcp_timeouts[]
|
||||
static unsigned int * tcp_timeouts[]
|
||||
= { NULL, /* TCP_CONNTRACK_NONE */
|
||||
&nf_ct_tcp_timeout_syn_sent, /* TCP_CONNTRACK_SYN_SENT, */
|
||||
&nf_ct_tcp_timeout_syn_recv, /* TCP_CONNTRACK_SYN_RECV, */
|
||||
|
@@ -27,8 +27,8 @@
|
||||
#include <linux/netfilter_ipv6.h>
|
||||
#include <net/netfilter/nf_conntrack_protocol.h>
|
||||
|
||||
unsigned long nf_ct_udp_timeout = 30*HZ;
|
||||
unsigned long nf_ct_udp_timeout_stream = 180*HZ;
|
||||
unsigned int nf_ct_udp_timeout = 30*HZ;
|
||||
unsigned int nf_ct_udp_timeout_stream = 180*HZ;
|
||||
|
||||
static int udp_pkt_to_tuple(const struct sk_buff *skb,
|
||||
unsigned int dataoff,
|
||||
|
@@ -431,25 +431,25 @@ extern int nf_conntrack_max;
|
||||
extern unsigned int nf_conntrack_htable_size;
|
||||
|
||||
/* From nf_conntrack_proto_tcp.c */
|
||||
extern unsigned long nf_ct_tcp_timeout_syn_sent;
|
||||
extern unsigned long nf_ct_tcp_timeout_syn_recv;
|
||||
extern unsigned long nf_ct_tcp_timeout_established;
|
||||
extern unsigned long nf_ct_tcp_timeout_fin_wait;
|
||||
extern unsigned long nf_ct_tcp_timeout_close_wait;
|
||||
extern unsigned long nf_ct_tcp_timeout_last_ack;
|
||||
extern unsigned long nf_ct_tcp_timeout_time_wait;
|
||||
extern unsigned long nf_ct_tcp_timeout_close;
|
||||
extern unsigned long nf_ct_tcp_timeout_max_retrans;
|
||||
extern unsigned int nf_ct_tcp_timeout_syn_sent;
|
||||
extern unsigned int nf_ct_tcp_timeout_syn_recv;
|
||||
extern unsigned int nf_ct_tcp_timeout_established;
|
||||
extern unsigned int nf_ct_tcp_timeout_fin_wait;
|
||||
extern unsigned int nf_ct_tcp_timeout_close_wait;
|
||||
extern unsigned int nf_ct_tcp_timeout_last_ack;
|
||||
extern unsigned int nf_ct_tcp_timeout_time_wait;
|
||||
extern unsigned int nf_ct_tcp_timeout_close;
|
||||
extern unsigned int nf_ct_tcp_timeout_max_retrans;
|
||||
extern int nf_ct_tcp_loose;
|
||||
extern int nf_ct_tcp_be_liberal;
|
||||
extern int nf_ct_tcp_max_retrans;
|
||||
|
||||
/* From nf_conntrack_proto_udp.c */
|
||||
extern unsigned long nf_ct_udp_timeout;
|
||||
extern unsigned long nf_ct_udp_timeout_stream;
|
||||
extern unsigned int nf_ct_udp_timeout;
|
||||
extern unsigned int nf_ct_udp_timeout_stream;
|
||||
|
||||
/* From nf_conntrack_proto_generic.c */
|
||||
extern unsigned long nf_ct_generic_timeout;
|
||||
extern unsigned int nf_ct_generic_timeout;
|
||||
|
||||
/* Log invalid packets of a given protocol */
|
||||
static int log_invalid_proto_min = 0;
|
||||
|
Reference in New Issue
Block a user