Re: [PATCH net-next 1/6] netfilter: nft_exthdr: Search chunks in SCTP packets only

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello:

This series was applied to netdev/net-next.git (refs/heads/master):

On Wed, 23 Jun 2021 19:02:56 +0200 you wrote:
> From: Phil Sutter <phil@xxxxxx>
> 
> Since user space does not generate a payload dependency, plain sctp
> chunk matches cause searching in non-SCTP packets, too. Avoid this
> potential mis-interpretation of packet data by checking pkt->tprot.
> 
> Fixes: 133dc203d77df ("netfilter: nft_exthdr: Support SCTP chunks")
> Signed-off-by: Phil Sutter <phil@xxxxxx>
> Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
> 
> [...]

Here is the summary with links:
  - [net-next,1/6] netfilter: nft_exthdr: Search chunks in SCTP packets only
    https://git.kernel.org/netdev/net-next/c/5acc44f39458
  - [net-next,2/6] netfilter: nft_extdhr: Drop pointless check of tprot_set
    https://git.kernel.org/netdev/net-next/c/06e95f0a2aa2
  - [net-next,3/6] netfilter: nf_tables: add last expression
    https://git.kernel.org/netdev/net-next/c/836382dc2471
  - [net-next,4/6] netfilter: conntrack: pass hook state to log functions
    https://git.kernel.org/netdev/net-next/c/62eec0d73393
  - [net-next,5/6] docs: networking: Update connection tracking offload sysctl parameters
    https://git.kernel.org/netdev/net-next/c/3078d964c0fe
  - [net-next,6/6] netfilter: nfnetlink_hook: fix check for snprintf() overflow
    https://git.kernel.org/netdev/net-next/c/24610ed80df6

You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html





[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux