Skip to content

nft_set_rbtree: Two fixes for overlap detection on insert

Stefano Brivio netfilter-devel stable 1 version Applied

Status from this message: Applied, thanks.

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest2 patches 1 replyApplied

Patches in v1 Applied

#Subject and filesSizeRepliesApplied
1/2nft_set_rbtree: Handle outcomes of tree rotations in overlap detectionnet/netfilter/nft_set_rbtree.c+14 -90 replies
2/2nft_set_rbtree: Detect partial overlap with start endpoint matchnet/netfilter/nft_set_rbtree.c+33 -10 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [PATCH nf 0/2] nft_set_rbtree: Two fixes for overlap detection on insert

Patch 1/2 fixes false positive cases resulting from a flawed assumption highlighted by

	https://bugzilla.netfilter.org/show_bug.cgi?id=1449

and is addressed for stable (5.6.x).

Patch 2/2 fixes a false negative case I noticed while skipping different interval overlap checks in nft.

Stefano Brivio (2):
nft_set_rbtree: Handle outcomes of tree rotations in overlap detection
nft_set_rbtree: Detect partial overlap with start endpoint match

 net/netfilter/nft_set_rbtree.c | 57 ++++++++++++++++++++++++++++------
 1 file changed, 47 insertions(+), 10 deletions(-)
Signature · 1 line
2.28.0