kp 205176451d pf: limit ioctl to a reasonable and tuneable number of elements
pf ioctls frequently take a variable number of elements as argument. This can
potentially allow users to request very large allocations.  These will fail,
but even a failing M_NOWAIT might tie up resources and result in concurrent
M_WAITOK allocations entering vm_wait and inducing reclamation of caches.

Limit these ioctls to what should be a reasonable value, but allow users to
tune it should they need to.

Differential Revision:	https://reviews.freebsd.org/D15018
2018-04-11 11:43:12 +00:00
..
2018-04-10 14:07:02 +00:00
2018-02-14 00:12:03 +00:00
2018-04-08 12:08:20 +00:00
2018-03-20 17:58:51 +00:00
2018-04-08 22:59:34 +00:00
2018-03-24 21:30:24 +00:00
2018-04-07 17:06:13 +00:00