Hi,
The following patchset contains Netfilter fixes for net:
1) Patches to bump position index from sysctl seq_next,
from Vasilin Averin.
2) Release flowtable hook from error path, from Florian Westphal.
3) Patches to add missing netlink attribute validation,
from Jakub Kicinski.
4) Missing NFTA_CHAIN_FLAGS in nf_tables_fill_chain_info().
5) Infinite loop in module autoload if extension is not available,
from Florian Westphal.
6) Missing module ownership in inet/nat chain type definition.
You can pull these changes from:
git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git
Thank you.
----------------------------------------------------------------
The following changes since commit f8a0fea9518c5ff7c37679504bd9eeabeae8ee36:
docs: networking: net_failover: Fix a few typos (2020-03-03 16:07:02 -0800)
are available in the git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git HEAD
for you to fetch changes up to 6a42cefb25d8bdc1b391f4a53c78c32164eea2dd:
netfilter: nft_chain_nat: inet family is missing module ownership (2020-03-06 18:00:43 +0100)
----------------------------------------------------------------
Florian Westphal (2):
netfilter: nf_tables: free flowtable hooks on hook register error
netfilter: nf_tables: fix infinite loop when expr is not available
Jakub Kicinski (3):
netfilter: cthelper: add missing attribute validation for cthelper
netfilter: nft_payload: add missing attribute validation for payload csum flags
netfilter: nft_tunnel: add missing attribute validation for tunnels
Pablo Neira Ayuso (2):
netfilter: nf_tables: dump NFTA_CHAIN_FLAGS attribute
netfilter: nft_chain_nat: inet family is missing module ownership
Vasily Averin (4):
netfilter: nf_conntrack: ct_cpu_seq_next should increase position index
netfilter: synproxy: synproxy_cpu_seq_next should increase position index
netfilter: xt_recent: recent_seq_next should increase position index
netfilter: x_tables: xt_mttg_seq_next should increase position index
net/netfilter/nf_conntrack_standalone.c | 2 +-
net/netfilter/nf_synproxy_core.c | 2 +-
net/netfilter/nf_tables_api.c | 22 ++++++++++++++--------
net/netfilter/nfnetlink_cthelper.c | 2 ++
net/netfilter/nft_chain_nat.c | 1 +
net/netfilter/nft_payload.c | 1 +
net/netfilter/nft_tunnel.c | 2 ++
net/netfilter/x_tables.c | 6 +++---
net/netfilter/xt_recent.c | 2 +-
9 files changed, 26 insertions(+), 14 deletions(-)
