Thread (8 messages) flat view 8 messages, 2 authors, 2021-06-23

Re: [PATCH net-next 1/6] netfilter: nft_exthdr: Search chunks in SCTP packets only

From: patchwork-bot+netdevbpf@kernel.org
Date: 2021-06-23 19:40:11
Also in: netfilter-devel

Hello:

This series was applied to netdev/net-next.git (refs/heads/master):

On Wed, 23 Jun 2021 19:02:56 +0200 you wrote:
From: Phil Sutter <phil@nwl.cc>

Since user space does not generate a payload dependency, plain sctp
chunk matches cause searching in non-SCTP packets, too. Avoid this
potential mis-interpretation of packet data by checking pkt->tprot.

Fixes: 133dc203d77df ("netfilter: nft_exthdr: Support SCTP chunks")
Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

[...]
Here is the summary with links:
  - [net-next,1/6] netfilter: nft_exthdr: Search chunks in SCTP packets only
    https://git.kernel.org/netdev/net-next/c/5acc44f39458
  - [net-next,2/6] netfilter: nft_extdhr: Drop pointless check of tprot_set
    https://git.kernel.org/netdev/net-next/c/06e95f0a2aa2
  - [net-next,3/6] netfilter: nf_tables: add last expression
    https://git.kernel.org/netdev/net-next/c/836382dc2471
  - [net-next,4/6] netfilter: conntrack: pass hook state to log functions
    https://git.kernel.org/netdev/net-next/c/62eec0d73393
  - [net-next,5/6] docs: networking: Update connection tracking offload sysctl parameters
    https://git.kernel.org/netdev/net-next/c/3078d964c0fe
  - [net-next,6/6] netfilter: nfnetlink_hook: fix check for snprintf() overflow
    https://git.kernel.org/netdev/net-next/c/24610ed80df6

You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html

Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help