Re: [PATCH] netfilter: conntrack: Use memset_startat() to zero struct nf_conn

[Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>]

On Thu, Nov 18, 2021 at 12:31:13PM -0800, Kees Cook wrote:
> In preparation for FORTIFY_SOURCE performing compile-time and run-time
> field bounds checking for memset(), avoid intentionally writing across
> neighboring fields.
> 
> Use memset_startat() to avoid confusing memset() about writing beyond
> the target struct member.

Applied to nf-next, thanks