From: patchwork-bot+netdevbpf@kernel.org
To: Florian Westphal <fw@strlen.de>
Cc: netdev@vger.kernel.org, pabeni@redhat.com, davem@davemloft.net,
edumazet@google.com, kuba@kernel.org,
netfilter-devel@vger.kernel.org, pablo@netfilter.org
Subject: Re: [PATCH net 1/9] netfilter: nf_conntrack_expect: zero at allocation time
Date: Wed, 01 Jul 2026 17:10:22 +0000 [thread overview]
Message-ID: <178292582264.1213092.416770887913754964.git-patchwork-notify@kernel.org> (raw)
In-Reply-To: <20260630045243.2657-2-fw@strlen.de>
Hello:
This series was applied to netdev/net.git (main)
by Florian Westphal <fw@strlen.de>:
On Tue, 30 Jun 2026 06:52:35 +0200 you wrote:
> There are occasional LLM hints wrt. leaking uninitialized data to
> userspace via ctnetlink. Just zero at allocation time,
> expectations are not frequently used these days.
>
> Intentionally keeps _init as-is because we could theoretically
> support re-init, so add the missing exp->dir there.
>
> [...]
Here is the summary with links:
- [net,1/9] netfilter: nf_conntrack_expect: zero at allocation time
https://git.kernel.org/netdev/net/c/241ccd2fed90
- [net,2/9] netfilter: nft_set_pipapo: don't leak bad clone into future transaction
https://git.kernel.org/netdev/net/c/47e65eff5069
- [net,3/9] netfilter: ipset: fix race between dump and ip_set_list resize
https://git.kernel.org/netdev/net/c/7cd9103283b2
- [net,4/9] netfilter: nf_conntrack_sip: validate skb_dst() before accessing it
https://git.kernel.org/netdev/net/c/e5e24a365a5e
- [net,5/9] netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master
https://git.kernel.org/netdev/net/c/bf5355cfdede
- [net,6/9] netfilter: nft_fib: reject fib expression on the netdev egress hook
https://git.kernel.org/netdev/net/c/d07955dd34ec
- [net,7/9] netfilter: nfnetlink_queue: restrict writes to network header
https://git.kernel.org/netdev/net/c/54f34607d184
- [net,8/9] netfilter: nftables: restrict linklayer and network header writes
https://git.kernel.org/netdev/net/c/df07998dfd40
- [net,9/9] netfilter: nftables: restrict checkum update offset
https://git.kernel.org/netdev/net/c/c3716a3c4346
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
next prev parent reply other threads:[~2026-07-01 17:10 UTC|newest]
Thread overview: 17+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-06-30 4:52 [PATCH net 0/9] netfilter: updates for net Florian Westphal
2026-06-30 4:52 ` [PATCH net 1/9] netfilter: nf_conntrack_expect: zero at allocation time Florian Westphal
2026-07-01 17:10 ` patchwork-bot+netdevbpf [this message]
2026-06-30 4:52 ` [PATCH net 2/9] netfilter: nft_set_pipapo: don't leak bad clone into future transaction Florian Westphal
2026-06-30 4:52 ` [PATCH net 3/9] netfilter: ipset: fix race between dump and ip_set_list resize Florian Westphal
2026-07-01 5:09 ` Florian Westphal
2026-07-01 20:33 ` Xiang Mei
2026-06-30 4:52 ` [PATCH net 4/9] netfilter: nf_conntrack_sip: validate skb_dst() before accessing it Florian Westphal
2026-07-01 6:36 ` Florian Westphal
2026-07-01 11:01 ` Pablo Neira Ayuso
2026-07-01 12:23 ` Pablo Neira Ayuso
2026-06-30 4:52 ` [PATCH net 5/9] netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master Florian Westphal
2026-07-01 5:04 ` Florian Westphal
2026-06-30 4:52 ` [PATCH net 6/9] netfilter: nft_fib: reject fib expression on the netdev egress hook Florian Westphal
2026-06-30 4:52 ` [PATCH net 7/9] netfilter: nfnetlink_queue: restrict writes to network header Florian Westphal
2026-06-30 4:52 ` [PATCH net 8/9] netfilter: nftables: restrict linklayer and network header writes Florian Westphal
2026-06-30 4:52 ` [PATCH net 9/9] netfilter: nftables: restrict checkum update offset Florian Westphal
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=178292582264.1213092.416770887913754964.git-patchwork-notify@kernel.org \
--to=patchwork-bot+netdevbpf@kernel.org \
--cc=davem@davemloft.net \
--cc=edumazet@google.com \
--cc=fw@strlen.de \
--cc=kuba@kernel.org \
--cc=netdev@vger.kernel.org \
--cc=netfilter-devel@vger.kernel.org \
--cc=pabeni@redhat.com \
--cc=pablo@netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.