Re: [RFC net-next 2/2] net: sched: protect against stack overflow in TC act_mirred

2019-06-14 Thread Florian Westphal
John Hurley wrote: > TC hooks allow the application of filters and actions to packets at both > ingress and egress of the network stack. It is possible, with poor > configuration, that this can produce loops whereby an ingress hook calls > a mirred egress action that has an egress hook that redire

[RFC net-next 2/2] net: sched: protect against stack overflow in TC act_mirred

2019-06-14 Thread John Hurley
TC hooks allow the application of filters and actions to packets at both ingress and egress of the network stack. It is possible, with poor configuration, that this can produce loops whereby an ingress hook calls a mirred egress action that has an egress hook that redirects back to the first ingres