Re: [PATCH net-next 1/7] netfilter: xt_mangle: only check verdict part of return value
From: patchwork-bot+netdevbpf@kernel.org
Date: 2023-10-18 10:10:23
Also in:
netfilter-devel
Hello: This series was applied to netdev/net-next.git (main) by Florian Westphal [off-list ref]: On Wed, 18 Oct 2023 10:51:05 +0200 you wrote:
These checks assume that the caller only returns NF_DROP without any errno embedded in the upper bits. This is fine right now, but followup patches will start to propagate such errors to allow kfree_skb_drop_reason() in the called functions, those would then indicate 'errno << 8 | NF_STOLEN'. [...]
Here is the summary with links:
- [net-next,1/7] netfilter: xt_mangle: only check verdict part of return value
https://git.kernel.org/netdev/net-next/c/e15e5027106f
- [net-next,2/7] netfilter: nf_tables: mask out non-verdict bits when checking return value
https://git.kernel.org/netdev/net-next/c/4d26ab0086aa
- [net-next,3/7] netfilter: conntrack: convert nf_conntrack_update to netfilter verdicts
https://git.kernel.org/netdev/net-next/c/6291b3a67ad5
- [net-next,4/7] netfilter: nf_nat: mask out non-verdict bits when checking return value
https://git.kernel.org/netdev/net-next/c/35c038b0a4be
- [net-next,5/7] netfilter: make nftables drops visible in net dropmonitor
https://git.kernel.org/netdev/net-next/c/e0d4593140b0
- [net-next,6/7] netfilter: bridge: convert br_netfilter to NF_DROP_REASON
https://git.kernel.org/netdev/net-next/c/cf8b7c1a5be7
- [net-next,7/7] netfilter: nf_tables: de-constify set commit ops function argument
https://git.kernel.org/netdev/net-next/c/256001672153
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html