Re: [PATCH net 01/13] netfilter: nf_tables: reject invalid set policy

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello:

This series was applied to netdev/net.git (main)
by Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>:

On Thu, 18 Jan 2024 17:17:14 +0100 you wrote:
> Report -EINVAL in case userspace provides a unsupported set backend
> policy.
> 
> Fixes: c50b960ccc59 ("netfilter: nf_tables: implement proper set selection")
> Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
> ---
>  net/netfilter/nf_tables_api.c | 10 +++++++++-
>  1 file changed, 9 insertions(+), 1 deletion(-)

Here is the summary with links:
  - [net,01/13] netfilter: nf_tables: reject invalid set policy
    https://git.kernel.org/netdev/net/c/0617c3de9b40
  - [net,02/13] netfilter: nf_tables: validate .maxattr at expression registration
    https://git.kernel.org/netdev/net/c/65b3bd600e15
  - [net,03/13] netfilter: nf_tables: bail out if stateful expression provides no .clone
    https://git.kernel.org/netdev/net/c/3c13725f43dc
  - [net,04/13] netfilter: nft_limit: do not ignore unsupported flags
    https://git.kernel.org/netdev/net/c/91a139cee120
  - [net,05/13] netfilter: nfnetlink_log: use proper helper for fetching physinif
    https://git.kernel.org/netdev/net/c/c3f9fd54cd87
  - [net,06/13] netfilter: nf_queue: remove excess nf_bridge variable
    https://git.kernel.org/netdev/net/c/aeaa44075f8e
  - [net,07/13] netfilter: propagate net to nf_bridge_get_physindev
    https://git.kernel.org/netdev/net/c/a54e72197037
  - [net,08/13] netfilter: bridge: replace physindev with physinif in nf_bridge_info
    https://git.kernel.org/netdev/net/c/9874808878d9
  - [net,09/13] netfilter: nf_tables: check if catch-all set element is active in next generation
    https://git.kernel.org/netdev/net/c/b1db244ffd04
  - [net,10/13] netfilter: nf_tables: do not allow mismatch field size and set key length
    https://git.kernel.org/netdev/net/c/3ce67e3793f4
  - [net,11/13] netfilter: nf_tables: skip dead set elements in netlink dump
    https://git.kernel.org/netdev/net/c/6b1ca88e4bb6
  - [net,12/13] netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description
    https://git.kernel.org/netdev/net/c/113661e07460
  - [net,13/13] ipvs: avoid stat macros calls from preemptible context
    https://git.kernel.org/netdev/net/c/d6938c1c76c6

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html






[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux