Patch "netfilter: nf_tables: nft_parse_register can return a negative value" has been added to the 5.17-stable tree

[Sasha Levin <sashal@xxxxxxxxxx>]

This is a note to let you know that I've just added the patch titled

    netfilter: nf_tables: nft_parse_register can return a negative value

to the 5.17-stable tree which can be found at:
    http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary

The filename of the patch is:
     netfilter-nf_tables-nft_parse_register-can-return-a-.patch
and it can be found in the queue-5.17 subdirectory.

If you, or anyone else, feels it should not be added to the stable tree,
please let <stable@xxxxxxxxxxxxxxx> know about it.



commit 96fa4a5df9f8d85172eb5d0d44a79d749d3fbfcd
Author: Antoine Tenart <atenart@xxxxxxxxxx>
Date:   Tue Apr 12 10:14:59 2022 +0200

    netfilter: nf_tables: nft_parse_register can return a negative value
    
    [ Upstream commit 6c6f9f31ecd47dce1d0dafca4bec8805f9bc97cd ]
    
    Since commit 6e1acfa387b9 ("netfilter: nf_tables: validate registers
    coming from userspace.") nft_parse_register can return a negative value,
    but the function prototype is still returning an unsigned int.
    
    Fixes: 6e1acfa387b9 ("netfilter: nf_tables: validate registers coming from userspace.")
    Signed-off-by: Antoine Tenart <atenart@xxxxxxxxxx>
    Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
    Signed-off-by: Sasha Levin <sashal@xxxxxxxxxx>

diff --git a/net/netfilter/nf_tables_api.c b/net/netfilter/nf_tables_api.c
index 1f5a0eece0d1..30d29d038d09 100644
--- a/net/netfilter/nf_tables_api.c
+++ b/net/netfilter/nf_tables_api.c
@@ -9275,7 +9275,7 @@ int nft_parse_u32_check(const struct nlattr *attr, int max, u32 *dest)
 }
 EXPORT_SYMBOL_GPL(nft_parse_u32_check);
 
-static unsigned int nft_parse_register(const struct nlattr *attr, u32 *preg)
+static int nft_parse_register(const struct nlattr *attr, u32 *preg)
 {
 	unsigned int reg;