Hello, This batch contains a few updates for your *net-next* tree. Note that this includes two patches that make changes to lib/. 1. silence a harmless warning for CONFIG_NF_CONNTRACK_PROCFS=n builds, from Zhu Wang. 2, 3: Allow NLA_POLICY_MASK to be used with BE16/BE32 types, and replace a few manual checks with nla_policy based one in nf_tables, from myself. 4: cleanup in ctnetlink to validate while parsing rather than using two steps, from Lin Ma. 5: refactor boyer-moore textsearch by moving a small chunk to a helper function, rom Jeremy Sowden. The following changes since commit bc758ade614576d1c1b167af0246ada8c916c804: net/mlx4: clean up a type issue (2023-07-26 22:08:44 -0700) are available in the Git repository at: https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next.git tags/nf-next-23-07-27 for you to fetch changes up to 86e9c9aa2358a74bcc5e63f9fc69c2d01e64c002: lib/ts_bm: add helper to reduce indentation and improve readability (2023-07-27 13:45:51 +0200) ---------------------------------------------------------------- netfilter net-next pull request 2023-07-27 ---------------------------------------------------------------- Florian Westphal (2): netlink: allow be16 and be32 types in all uint policy checks netfilter: nf_tables: use NLA_POLICY_MASK to test for valid flag options Jeremy Sowden (1): lib/ts_bm: add helper to reduce indentation and improve readability Lin Ma (1): netfilter: conntrack: validate cta_ip via parsing Zhu Wang (1): nf_conntrack: fix -Wunused-const-variable= include/net/netlink.h | 10 +++----- lib/nlattr.c | 6 +++++ lib/ts_bm.c | 43 +++++++++++++++++++++++---------- net/netfilter/nf_conntrack_netlink.c | 8 ++---- net/netfilter/nf_conntrack_proto_dccp.c | 2 ++ net/netfilter/nft_fib.c | 13 +++++----- net/netfilter/nft_lookup.c | 6 ++--- net/netfilter/nft_masq.c | 8 +++--- net/netfilter/nft_nat.c | 8 +++--- net/netfilter/nft_redir.c | 8 +++--- 10 files changed, 61 insertions(+), 51 deletions(-)