From: patchwork-bot+netdevbpf@kernel.org
To: Pablo Neira Ayuso <pablo@netfilter.org>
Cc: netfilter-devel@vger.kernel.org, davem@davemloft.net,
netdev@vger.kernel.org, kuba@kernel.org, pabeni@redhat.com,
edumazet@google.com
Subject: Re: [PATCH net 1/8] netfilter: nf_tables: validate variable length element extension
Date: Wed, 10 Aug 2022 05:10:15 +0000 [thread overview]
Message-ID: <166010821595.18792.3808704425767973984.git-patchwork-notify@kernel.org> (raw)
In-Reply-To: <20220809220532.130240-2-pablo@netfilter.org>
Hello:
This series was applied to netdev/net.git (master)
by Pablo Neira Ayuso <pablo@netfilter.org>:
On Wed, 10 Aug 2022 00:05:25 +0200 you wrote:
> Update template to validate variable length extensions. This patch adds
> a new .ext_len[id] field to the template to store the expected extension
> length. This is used to sanity check the initialization of the variable
> length extension.
>
> Use PTR_ERR() in nft_set_elem_init() to report errors since, after this
> update, there are two reason why this might fail, either because of
> ENOMEM or insufficient room in the extension field (EINVAL).
>
> [...]
Here is the summary with links:
- [net,1/8] netfilter: nf_tables: validate variable length element extension
https://git.kernel.org/netdev/net/c/34aae2c2fb1e
- [net,2/8] netfilter: nf_tables: do not allow SET_ID to refer to another table
https://git.kernel.org/netdev/net/c/470ee20e069a
- [net,3/8] netfilter: nf_tables: do not allow CHAIN_ID to refer to another table
https://git.kernel.org/netdev/net/c/95f466d22364
- [net,4/8] netfilter: nf_tables: do not allow RULE_ID to refer to another chain
https://git.kernel.org/netdev/net/c/36d5b2913219
- [net,5/8] netfilter: ip6t_LOG: Fix a typo in a comment
https://git.kernel.org/netdev/net/c/134941683b89
- [net,6/8] netfilter: nf_tables: upfront validation of data via nft_data_init()
https://git.kernel.org/netdev/net/c/341b69416087
- [net,7/8] netfilter: nf_tables: disallow jump to implicit chain from set element
https://git.kernel.org/netdev/net/c/f323ef3a0d49
- [net,8/8] netfilter: nf_tables: fix null deref due to zeroed list head
https://git.kernel.org/netdev/net/c/580077855a40
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
next prev parent reply other threads:[~2022-08-10 5:10 UTC|newest]
Thread overview: 13+ messages / expand[flat|nested] mbox.gz Atom feed top
2022-08-09 22:05 [PATCH net 0/8] Netfilter fixes for net Pablo Neira Ayuso
2022-08-09 22:05 ` [PATCH net 1/8] netfilter: nf_tables: validate variable length element extension Pablo Neira Ayuso
2022-08-10 4:21 ` Jakub Kicinski
2022-08-10 5:10 ` patchwork-bot+netdevbpf [this message]
2022-08-09 22:05 ` [PATCH net 2/8] netfilter: nf_tables: do not allow SET_ID to refer to another table Pablo Neira Ayuso
2022-08-09 22:05 ` [PATCH net 3/8] netfilter: nf_tables: do not allow CHAIN_ID " Pablo Neira Ayuso
2022-08-09 22:05 ` [PATCH net 4/8] netfilter: nf_tables: do not allow RULE_ID to refer to another chain Pablo Neira Ayuso
2022-08-09 22:05 ` [PATCH net 5/8] netfilter: ip6t_LOG: Fix a typo in a comment Pablo Neira Ayuso
2022-08-09 22:05 ` [PATCH net 6/8] netfilter: nf_tables: upfront validation of data via nft_data_init() Pablo Neira Ayuso
2022-08-09 22:05 ` [PATCH net 7/8] netfilter: nf_tables: disallow jump to implicit chain from set element Pablo Neira Ayuso
2022-08-09 22:05 ` [PATCH net 8/8] netfilter: nf_tables: fix null deref due to zeroed list head Pablo Neira Ayuso
2022-08-10 4:27 ` [PATCH net 0/8] Netfilter fixes for net Jakub Kicinski
2022-08-10 7:59 ` Pablo Neira Ayuso
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=166010821595.18792.3808704425767973984.git-patchwork-notify@kernel.org \
--to=patchwork-bot+netdevbpf@kernel.org \
--cc=davem@davemloft.net \
--cc=edumazet@google.com \
--cc=kuba@kernel.org \
--cc=netdev@vger.kernel.org \
--cc=netfilter-devel@vger.kernel.org \
--cc=pabeni@redhat.com \
--cc=pablo@netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.