Re: [PATCH net 1/5] netfilter: nf_set_pipapo_avx2: fix initial map fill

Hello:

This series was applied to netdev/net.git (main)
by Pablo Neira Ayuso [off-list ref]:

On Thu,  5 Jun 2025 10:57:31 +0200 you wrote:

From: Florian Westphal <fw@strlen.de>

If the first field doesn't cover the entire start map, then we must zero
out the remainder, else we leak those bits into the next match round map.

The early fix was incomplete and did only fix up the generic C
implementation.

[...]

Here is the summary with links:
  - [net,1/5] netfilter: nf_set_pipapo_avx2: fix initial map fill
    https://git.kernel.org/netdev/net/c/ea77c397bff8
  - [net,2/5] selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing
    https://git.kernel.org/netdev/net/c/febe7eda74d1
  - [net,3/5] selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug
    https://git.kernel.org/netdev/net/c/38399f2b0fe4
  - [net,4/5] netfilter: nf_nat: also check reverse tuple to obtain clashing entry
    https://git.kernel.org/netdev/net/c/50d9ce9679dd
  - [net,5/5] selftests: netfilter: nft_nat.sh: add test for reverse clash with nat
    https://git.kernel.org/netdev/net/c/3c3c3248496a

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html