netfilter: nf_tables fixes for 5.10.y
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest3 patches 3 repliesIn review
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/3 | netfilter: nftables: avoid potential overflows on 32bit archesnet/ net/ | +10 | 0 replies | |
| 2/3 | netfilter: nf_tables: initialize set before expression setupnet/ | +24 | 0 replies | |
| 3/3 | netfilter: nftables: clone set element expression templatenet/ | +28 | 0 replies |
Reviews trailers per patch
None of the 3 patches has a Reviewed-by or Acked-by.
| Patch | Salvatore Bonaccorso |
|---|---|
| Series | T-b |
| 1/3 | |
| 2/3 | |
| 3/3 |
Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.
Cover letter [PATCH 5.10.y 0/3] netfilter: nf_tables fixes for 5.10.y
Hello,
please consider applying these nf_tables fixes to the 5.10.y tree. These patches had to mangled to make them apply to 5.10.y.
I've done the follwoing tests in a kasan/kmemleak enabled vm:
1. run upstream nft python/shell tests.
Without patch 2 and 3 doing so results in kernel crash. Some tests fail but afaics those are expected to fail on 5.10 due to lack of feature being tested.
2. Tested the 'conncount' feature (its affected by last patch). Worked as designed.
3. ran nftables related kernel self tests.
No kmemleak or kasan splats were seen.
Eric Dumazet (1):
netfilter: nftables: avoid potential overflows on 32bit arches
Pablo Neira Ayuso (2):
netfilter: nf_tables: initialize set before expression setup
netfilter: nftables: clone set element expression template
net/netfilter/nf_tables_api.c | 89 ++++++++++++++++++++++------------- net/netfilter/nft_set_hash.c | 10 ++-- 2 files changed, 62 insertions(+), 37 deletions(-)
Signature · 1 line
2.32.0