netfilter: ipset: restore allowing 64 clashing elements in hash:net,iface
authorJozsef Kadlecsik <kadlec@netfilter.org>
Tue, 22 Nov 2022 19:18:58 +0000 (20:18 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 22 Nov 2022 20:44:17 +0000 (21:44 +0100)
commit6a66ce44a51bdfc47721f0c591137df2d4b21247
tree50baf1ca39069afc6417e2949f1d97c12b4b8086
parentc7aa1a76d4a0a3c401025b60c401412bbb60f8c6
netfilter: ipset: restore allowing 64 clashing elements in hash:net,iface

The commit 510841da1fcc ("netfilter: ipset: enforce documented limit to
prevent allocating huge memory") was too strict and prevented to add up to
64 clashing elements to a hash:net,iface type of set. This patch fixes the
issue and now the type behaves as documented.

Fixes: 510841da1fcc ("netfilter: ipset: enforce documented limit to prevent allocating huge memory")
Signed-off-by: Jozsef Kadlecsik <kadlec@netfilter.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/ipset/ip_set_hash_gen.h