On Tue, Oct 17, 2023 at 12:09:39PM +0200, Florian Westphal wrote: > Phil Sutter <phil@xxxxxx> wrote: > > Assume that caller's 'to' offset really represents an upper boundary for > > the pattern search, so patterns extending past this offset are to be > > rejected. > > > > The old behaviour also was kind of inconsistent when it comes to > > fragmentation (or otherwise non-linear skbs): If the pattern started in > > between 'to' and 'from' offsets but extended to the next fragment, it > > was not found if 'to' offset was still within the current fragment. > > > > Test the new behaviour in a kselftest using iptables' string match. > > Reviewed-by: Florian Westphal <fw@xxxxxxxxx> Reviewed-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
