Re: integer overflow in PF may lead to dropped connections

2017-03-08 Thread Claudio Jeker
On Fri, Mar 03, 2017 at 04:58:18PM +0100, mathieu.bl...@cea.fr wrote: > Hi, > > here is a patch which fixes an integer overflow in the computation of > adaptive timeouts. The effect of this integer overflow is that > depending on timeout values, legitimate established connection states > can be ev

Re: integer overflow in PF may lead to dropped connections

2017-03-06 Thread Mike Belopuhov
On Mon, Mar 06, 2017 at 14:46 +0100, Claudio Jeker wrote: > On Mon, Mar 06, 2017 at 01:04:28PM +0100, Mike Belopuhov wrote: > > On Fri, Mar 03, 2017 at 16:58 +0100, mathieu.bl...@cea.fr wrote: > > > Hi, > > > > > > here is a patch which fixes an integer overflow in the computation of > > > adaptiv

Re: integer overflow in PF may lead to dropped connections

2017-03-06 Thread Claudio Jeker
On Mon, Mar 06, 2017 at 01:04:28PM +0100, Mike Belopuhov wrote: > On Fri, Mar 03, 2017 at 16:58 +0100, mathieu.bl...@cea.fr wrote: > > Hi, > > > > here is a patch which fixes an integer overflow in the computation of > > adaptive timeouts. The effect of this integer overflow is that > > depending

Re: integer overflow in PF may lead to dropped connections

2017-03-06 Thread Mike Belopuhov
On Fri, Mar 03, 2017 at 16:58 +0100, mathieu.bl...@cea.fr wrote: > Hi, > > here is a patch which fixes an integer overflow in the computation of > adaptive timeouts. The effect of this integer overflow is that > depending on timeout values, legitimate established connection states > can be evicted

integer overflow in PF may lead to dropped connections

2017-03-06 Thread mathieu.blanc
Hi, here is a patch which fixes an integer overflow in the computation of adaptive timeouts. The effect of this integer overflow is that depending on timeout values, legitimate established connection states can be evicted immediately (although other states with shorter timeouts would be available