From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 40A183A1E80; Thu, 11 Jun 2026 10:40:21 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1781174422; cv=none; b=kg/tR45phXklgbRXjMiAwc9bcFjNYarB7WdJBC6nkynz8aDmJBuvjzI9hgRJ8bJycDCWe++3FQbEoeCQSSupwguFQl80ua8OepfhLNnD0YqLGFW4FARAMzWj2kNCevoIR80UgcCD6DVt/5co1lPR6c2OWEgk85QUDP6x6EagfOw= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1781174422; c=relaxed/simple; bh=5tep4ZCqo8mD5ez7lhAPy8giA4HfEiACCxRP/SrgmdA=; h=Content-Type:MIME-Version:Subject:From:Message-Id:Date:References: In-Reply-To:To:Cc; b=U62HNwFKYfwW7bRxguoAWikVsJ8dNV8Q77q81coFK9b54YPmnr7HdHw78A8HwehnFuXvkb4ewnjKxiEd6BvocqHzEdM5itepevEIO+wuZz2eG5gT39IYI3PGrfKMwd50y9tUMVI0Www4NUI7e6VHDLXeUTBwDPiVckbI35BpEZ8= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=N/FVvvEV; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="N/FVvvEV" Received: by smtp.kernel.org (Postfix) with ESMTPSA id E406F1F00893; Thu, 11 Jun 2026 10:40:20 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel.org; s=k20260515; t=1781174420; bh=sRyf/IRwECv7OLEXcVD6dn1iTbfDnqZtBreJDXUm4jA=; h=Subject:From:Date:References:In-Reply-To:To:Cc; b=N/FVvvEVIR4DWWnCmKEJ5Y0WQmR/nn8ENGu+qPpst1lpgVPbJSbhouk6ntcb/ndY1 EigJZSiAvFcvPfhB7mWYae83WiTYV8GE3eyNGI//pXtHUkEhQdeC3os6KHEiesxB1U 08HHzsQJbOiqnuID5tB+pl5S6SjBHQKhdCyDjXJlKZ/+wBgPQiNUMYFUArEYbO5OeR t6f42XCccs8up0YioI7XEF/sDzQ/1ubovXKWJ3rrxgUTx9otHfXp0eLvYZPG0VPC/H Ew9OK0bYElaixvuOMYqNgv+KvQSfHBPFoQB3GeCfGJAOtV0MlVaqi5x+ICNDqLrmMY i995ArVQ8TDYQ== Received: from [10.30.226.235] (localhost [IPv6:::1]) by aws-us-west-2-korg-oddjob-rhel9-1.codeaurora.org (Postfix) with ESMTP id 939263930E4A; Thu, 11 Jun 2026 10:40:19 +0000 (UTC) Content-Type: text/plain; charset="utf-8" Precedence: bulk X-Mailing-List: netdev@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Subject: Re: [PATCH net v2] netfilter: nf_log: validate MAC header was set before dumping it From: patchwork-bot+netdevbpf@kernel.org Message-Id: <178117441822.3886909.10696734490273557626.git-patchwork-notify@kernel.org> Date: Thu, 11 Jun 2026 10:40:18 +0000 References: <20260609225502.54239-1-xmei5@asu.edu> In-Reply-To: <20260609225502.54239-1-xmei5@asu.edu> To: Xiang Mei Cc: netfilter-devel@vger.kernel.org, pablo@netfilter.org, fw@strlen.de, phil@nwl.cc, davem@davemloft.net, edumazet@google.com, kuba@kernel.org, pabeni@redhat.com, coreteam@netfilter.org, netdev@vger.kernel.org, bestswngs@gmail.com Hello: This patch was applied to netdev/net.git (main) by Pablo Neira Ayuso : On Tue, 9 Jun 2026 15:55:02 -0700 you wrote: > The fallback path of dump_mac_header() guards the MAC header access > only with "skb->mac_header != skb->network_header", without checking > skb_mac_header_was_set(). When the MAC header is unset, mac_header is > 0xffff, so the test passes and skb_mac_header(skb) returns > skb->head + 0xffff, ~64 KiB past the buffer; the loop then reads > dev->hard_header_len bytes out of bounds into the kernel log. > > [...] Here is the summary with links: - [net,v2] netfilter: nf_log: validate MAC header was set before dumping it https://git.kernel.org/netdev/net/c/a84b6fedbc97 You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html