--- zzzz-none-000/linux-4.4.60/net/ipv6/netfilter/ip6_tables.c	2017-04-08 07:53:53.000000000 +0000
+++ scorpion-7490-727/linux-4.4.60/net/ipv6/netfilter/ip6_tables.c	2021-02-04 17:41:59.000000000 +0000
@@ -425,6 +425,10 @@
 			}
 			if (table_base + v != ip6t_next_entry(e) &&
 			    !(e->ipv6.flags & IP6T_F_GOTO)) {
+				if (unlikely(stackidx >= private->stacksize)) {
+					verdict = NF_DROP;
+					break;
+				}
 				jumpstack[stackidx++] = e;
 			}