Re: [PATCH net 1/4] netfilter: nft_nat: fully initialise new_addr in netmap setup

Hello:

This series was applied to netdev/net.git (main)
by Pablo Neira Ayuso [off-list ref]:

On Sun, 13 Sep 2026 22:54:44 +0200 you wrote:

From: Theodor Arsenij Larionov Trichkine <redacted>

nft_nat_setup_netmap() builds the mapped address in an on-stack
union nf_inet_addr. For an IPv4 mapping it writes only the 4-byte .ip
member and the loop runs a single 32-bit iteration, but it then copies
the whole 16-byte union into range->min_addr and range->max_addr, so the
upper 12 bytes reach nf_nat_setup_info() uninitialised.

[...]

Here is the summary with links:
  - [net,1/4] netfilter: nft_nat: fully initialise new_addr in netmap setup
    https://git.kernel.org/netdev/net/c/d313499df661
  - [net,2/4] netfilter: nf_tables: fix device name and prefix match in hook lookup
    https://git.kernel.org/netdev/net/c/444e4c88c9c6
  - [net,3/4] netfilter: nf_nat: unregister and release hooks on error
    https://git.kernel.org/netdev/net/c/cbdd39ce4253
  - [net,4/4] netfilter: flowtable: hold reference on ct until flow is released
    https://git.kernel.org/netdev/net/c/e75a9fa1d44b

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html