--- zzzz-none-000/linux-4.4.60/net/ipv4/netfilter/arp_tables.c 2017-04-08 07:53:53.000000000 +0000 +++ maple-7510-730/linux-4.4.60/net/ipv4/netfilter/arp_tables.c 2021-03-17 14:36:41.000000000 +0000 @@ -329,6 +329,10 @@ } if (table_base + v != arpt_next_entry(e)) { + if (unlikely(stackidx >= private->stacksize)) { + verdict = NF_DROP; + break; + } jumpstack[stackidx++] = e; }