git.monstr.eu Git - linux-2.6-microblaze.git/commit

author	Pablo Neira Ayuso <pablo@netfilter.org>
	Tue, 26 Nov 2024 10:59:06 +0000 (11:59 +0100)
committer	Pablo Neira Ayuso <pablo@netfilter.org>
	Thu, 28 Nov 2024 12:14:24 +0000 (13:14 +0100)
commit	b7529880cb961d515642ce63f9d7570869bbbdc3
tree	79d05805b4b59b67834ece69c84b366db989814d	tree
parent	04317f4eb2aad312ad85c1a17ad81fe75f1f9bc7	commit \| diff

netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level

cgroup maximum depth is INT_MAX by default, there is a cgroup toggle to
restrict this maximum depth to a more reasonable value not to harm
performance. Remove unnecessary WARN_ON_ONCE which is reachable from
userspace.

Fixes: 7f3287db6543 ("netfilter: nft_socket: make cgroupsv2 matching work with namespaces")
Reported-by: syzbot+57bac0866ddd99fe47c0@syzkaller.appspotmail.com
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>