: Netfilter fixes
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest3 patches 1 replyIn review
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/3 | : xt_TCPOPTSTRIP: signed tcphoff for ipv6_skip_exthdr() retvalnet/ | +1 | 0 replies | |
| 2/3 | : x_tables: fix net namespace leak when reading /proc/net/xxx_tables_namesnet/ | +1 | 0 replies | |
| 3/3 | : {nfnetlink,ip,ip6}_queue: fix skb_over_panic when enlarging packetsnet/ net/ net/ | +6 | 0 replies |
Reviews trailers per patch
No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.
Cover letter [NETFILTER 00/03]: Netfilter fixes
Hi Dave,
these three patches fix (again) skb_over_panic caused by netfilter queueing, a namespace leak when reading /proc/net/xxx_tables_names and incorrect error handling in the TCPOPTSTRIP target.
Please apply, thanks.
net/ipv4/netfilter/ip_queue.c | 5 ++--- net/ipv6/netfilter/ip6_queue.c | 5 ++--- net/netfilter/nfnetlink_queue.c | 5 ++--- net/netfilter/x_tables.c | 2 +- net/netfilter/xt_TCPOPTSTRIP.c | 2 +- 5 files changed, 8 insertions(+), 11 deletions(-)
Arnaud Ebalard (1):
[NETFILTER]: {nfnetlink,ip,ip6}_queue: fix skb_over_panic when enlarging packets
Pavel Emelyanov (1):
[NETFILTER]: x_tables: fix net namespace leak when reading /proc/net/xxx_tables_names
Roel Kluin (1):
[NETFILTER]: xt_TCPOPTSTRIP: signed tcphoff for ipv6_skip_exthdr() retval