Thread (12 messages) 12 messages, 2 authors, 1d ago

Re: [PATCH net 1/9] netfilter: nf_nat_sip: reload possible stale data pointer

From: patchwork-bot+netdevbpf@kernel.org
Date: 2026-07-06 10:50:38
Also in: netfilter-devel

Hello:

This series was applied to netdev/net.git (main)
by Florian Westphal [off-list ref]:

On Fri,  3 Jul 2026 14:57:01 +0200 you wrote:
quoting sashiko:
 ------------------------------------------------------------------------
 [..] noticed a potential memory bug and header corruption involving the
 SIP NAT helper.

 In net/netfilter/nf_nat_sip.c:nf_nat_sip():
	if (skb_ensure_writable(skb, skb->len)) {
		nf_ct_helper_log(skb, ct, "cannot mangle packet");
		return NF_DROP;
	}
	uh = (void *)skb->data + protoff;
	uh->dest = ct_sip_info->forced_dport;
	if (!nf_nat_mangle_udp_packet(skb, ct, ctinfo, protoff,
				      0, 0, NULL, 0)) {

[...]
Here is the summary with links:
  - [net,1/9] netfilter: nf_nat_sip: reload possible stale data pointer
    https://git.kernel.org/netdev/net/c/77e43bcb7ec1
  - [net,2/9] netfilter: xt_u32: reject invalid shift counts
    https://git.kernel.org/netdev/net/c/64cdf7d30ac1
  - [net,3/9] netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()
    https://git.kernel.org/netdev/net/c/444853cd4382
  - [net,4/9] netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master on updates
    https://git.kernel.org/netdev/net/c/278296b69fae
  - [net,5/9] netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop
    https://git.kernel.org/netdev/net/c/43ccc20b5a73
  - [net,6/9] netfilter: nft_set_rbtree: get command skips end element with open interval
    https://git.kernel.org/netdev/net/c/d63611cbe8af
  - [net,7/9] ipvs: fix PMTU for GUE/GRE tunnel ICMP errors
    https://git.kernel.org/netdev/net/c/6b335af0d0d1
  - [net,8/9] ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
    https://git.kernel.org/netdev/net/c/2975324d164c
  - [net,9/9] netfilter: xt_connmark: reject invalid shift parameters
    https://git.kernel.org/netdev/net/c/1b47026fb4b3

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html

Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help