--- net/ipv4/udp.c

+++ net/ipv4/udp.c

@@ -1832,12 +1832,14 @@ void __init udp_init(void)

udp_table_init(&udp_table);

/* Set the pressure threshold up by the same strategy of TCP. It is a

* fraction of global memory that is up to 1/2 at 256 MB, decreasing

- * toward zero with the amount of memory, with a floor of 128 pages.

+ * toward zero with the amount of memory, with a floor of 128 pages,

+ * and a ceiling that prevents an integer overflow.

*/

nr_pages = totalram_pages - totalhigh_pages;

limit = min(nr_pages, 1UL<<(28-PAGE_SHIFT)) >> (20-PAGE_SHIFT);

limit = (limit * (nr_pages >> (20-PAGE_SHIFT))) >> (PAGE_SHIFT-11);

limit = max(limit, 128UL);

+ limit = min(limit, INT_MAX * 4UL / 3 / 2);

sysctl_udp_mem[0] = limit / 4 * 3;

sysctl_udp_mem[1] = limit;

sysctl_udp_mem[2] = sysctl_udp_mem[0] * 2;