As for libnftnl, this series aims at fixing a number of issues identified by covscan. And again, due to my limited overview of the code-base, some of them might as well be invalid although I tried to verify the issues as best as I can. Phil Sutter (4): evaluate: Fix datalen checks in expr_evaluate_string() netlink_delinearize: Avoid potential null pointer deref proto_find_num: Avoid potential null pointer dereference evaluate: Avoid undefined behaviour in concat_subtype_id() src/evaluate.c | 8 +++++--- src/netlink_delinearize.c | 2 ++ src/proto.c | 2 +- 3 files changed, 8 insertions(+), 4 deletions(-) -- 2.8.2 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html