Hi,
The following patchset contains Netfilter fixes for net:
1) Hit ENOENT when trying to update an unexisting base chain.
2) Fix libmnl pkg-config usage in selftests, from Jeremy Sowden.
3) KASAN reports use-after-free when deleting a set element for an
anonymous set that was already removed in the same transaction,
reported by P. Sondej and P. Krysiuk.
Please, pull these changes from:
git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf.git
Thanks.
----------------------------------------------------------------
The following changes since commit c6d96df9fa2c1d19525239d4262889cce594ce6c:
net: ethernet: mtk_eth_soc: drop generic vlan rx offload, only use DSA untagging (2023-05-02 20:19:52 -0700)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf.git nf-23-05-03
for you to fetch changes up to c1592a89942e9678f7d9c8030efa777c0d57edab:
netfilter: nf_tables: deactivate anonymous set from preparation phase (2023-05-03 08:24:32 +0200)
----------------------------------------------------------------
netfilter pull request 23-05-03
----------------------------------------------------------------
Jeremy Sowden (1):
selftests: netfilter: fix libmnl pkg-config usage
Pablo Neira Ayuso (2):
netfilter: nf_tables: hit ENOENT on unexisting chain/flowtable update with missing attributes
netfilter: nf_tables: deactivate anonymous set from preparation phase
include/net/netfilter/nf_tables.h | 1 +
net/netfilter/nf_tables_api.c | 41 +++++++++++++++++++++---------
net/netfilter/nft_dynset.c | 2 +-
net/netfilter/nft_lookup.c | 2 +-
net/netfilter/nft_objref.c | 2 +-
tools/testing/selftests/netfilter/Makefile | 7 +++--
6 files changed, 38 insertions(+), 17 deletions(-)
