diff options
| author | Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | 2018-06-01 20:59:14 +0200 |
|---|---|---|
| committer | Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | 2018-06-01 20:59:14 +0200 |
| commit | cef553009b5181ae3c9f465c0e300ec8c8b37fbd (patch) | |
| tree | d29251244ca4ff0d8a737c474971c90e87c3e2a8 /src | |
| parent | 8b140bd12daffd6b3c6e50af9c55f8a601900664 (diff) | |
Limit max timeout value to (UINT_MAX >> 1)/MSEC_PER_SEC
Due to the negative value condition in msecs_to_jiffies(), the real
max possible timeout value must be set to (UINT_MAX >> 1)/MSEC_PER_SEC.
Neutron Soutmun proposed the proper fix, but an insufficient one was
applied, see https://patchwork.ozlabs.org/patch/400405/.
Diffstat (limited to 'src')
| -rw-r--r-- | src/ipset.8 | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/ipset.8 b/src/ipset.8 index cd8c3ad..87fb938 100644 --- a/src/ipset.8 +++ b/src/ipset.8 @@ -271,7 +271,8 @@ for new entries. If a set is created with timeout support, then the same \fBtimeout\fR option can be used to specify non\-default timeout values when adding entries. Zero timeout value means the entry is added permanent to the set. The timeout value of already added elements can be changed by re-adding the element -using the \fB\-exist\fR option. Example: +using the \fB\-exist\fR option. The largest possible timeout value is 2147483 +(in seconds). Example: .IP ipset create test hash:ip timeout 300 .IP |