From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-13.0 required=3.0 tests=HEADER_FROM_DIFFERENT_DOMAINS,INCLUDES_PULL_REQUEST,MAILING_LIST_MULTI, MENTIONS_GIT_HOSTING,SPF_PASS,USER_AGENT_GIT autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 3FCF4C282C8 for ; Mon, 28 Jan 2019 14:04:15 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id 13C3720989 for ; Mon, 28 Jan 2019 14:04:15 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726861AbfA1OEN (ORCPT ); Mon, 28 Jan 2019 09:04:13 -0500 Received: from mail.us.es ([193.147.175.20]:35394 "EHLO mail.us.es" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726689AbfA1OEN (ORCPT ); Mon, 28 Jan 2019 09:04:13 -0500 Received: from antivirus1-rhel7.int (unknown [192.168.2.11]) by mail.us.es (Postfix) with ESMTP id 60C3E2D9AE3 for ; Mon, 28 Jan 2019 15:04:11 +0100 (CET) Received: from antivirus1-rhel7.int (localhost [127.0.0.1]) by antivirus1-rhel7.int (Postfix) with ESMTP id 5332ADA86A for ; Mon, 28 Jan 2019 15:04:11 +0100 (CET) Received: by antivirus1-rhel7.int (Postfix, from userid 99) id 489FDDA867; Mon, 28 Jan 2019 15:04:11 +0100 (CET) Received: from antivirus1-rhel7.int (localhost [127.0.0.1]) by antivirus1-rhel7.int (Postfix) with ESMTP id 7097FDA796; Mon, 28 Jan 2019 15:04:09 +0100 (CET) Received: from 192.168.1.97 (192.168.1.97) by antivirus1-rhel7.int (F-Secure/fsigk_smtp/550/antivirus1-rhel7.int); Mon, 28 Jan 2019 15:04:09 +0100 (CET) X-Virus-Status: clean(F-Secure/fsigk_smtp/550/antivirus1-rhel7.int) Received: from salvia.here (sys.soleta.eu [212.170.55.40]) (Authenticated sender: pneira@us.es) by entrada.int (Postfix) with ESMTPA id 43CEB4265A2F; Mon, 28 Jan 2019 15:04:09 +0100 (CET) X-SMTPAUTHUS: auth mail.us.es From: Pablo Neira Ayuso To: netfilter-devel@vger.kernel.org Cc: davem@davemloft.net, netdev@vger.kernel.org Subject: [PATCH 0/7] Netfilter/IPVS fixes for net Date: Mon, 28 Jan 2019 15:03:58 +0100 Message-Id: <20190128140405.15020-1-pablo@netfilter.org> X-Mailer: git-send-email 2.11.0 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Virus-Scanned: ClamAV using ClamSMTP Sender: netdev-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: netdev@vger.kernel.org Hi David, The following patchset contains Netfilter/IPVS fixes for your net tree: 1) The nftnl mutex is now per-netns, therefore use reference counter for matches and targets to deal with concurrent updates from netns. Moreover, place extensions in a pernet list. Patches from Florian Westphal. 2) Bail out with EINVAL in case of negative timeouts via setsockopt() through ip_vs_set_timeout(), from ZhangXiaoxu. 3) Spurious EINVAL on ebtables 32bit binary with 64bit kernel, also from Florian. 4) Reset TCP option header parser in case of fingerprint mismatch, otherwise follow up overlapping fingerprint definitions including TCP options do not work, from Fernando Fernandez Mancera. 5) Compilation warning in ipt_CLUSTER with CONFIG_PROC_FS unset. From Anders Roxell. You can pull these changes from: git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git Thanks! ---------------------------------------------------------------- The following changes since commit 88a8121dc1d3d0dbddd411b79ed236b6b6ea415c: af_packet: fix raw sockets over 6in4 tunnel (2019-01-17 15:54:45 -0800) are available in the git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git HEAD for you to fetch changes up to 206b8cc514d7ff2b79dd2d5ad939adc7c493f07a: netfilter: ipt_CLUSTERIP: fix warning unused variable cn (2019-01-28 11:09:12 +0100) ---------------------------------------------------------------- Anders Roxell (1): netfilter: ipt_CLUSTERIP: fix warning unused variable cn Fernando Fernandez Mancera (1): netfilter: nfnetlink_osf: add missing fmatch check Florian Westphal (4): netfilter: nft_compat: use refcnt_t type for nft_xt reference count netfilter: nft_compat: make lists per netns netfilter: nft_compat: destroy function must not have side effects netfilter: ebtables: compat: un-break 32bit setsockopt when no rules are present ZhangXiaoxu (1): ipvs: Fix signed integer overflow when setsockopt timeout net/bridge/netfilter/ebtables.c | 9 +- net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +- net/netfilter/ipvs/ip_vs_ctl.c | 12 +++ net/netfilter/nfnetlink_osf.c | 4 + net/netfilter/nft_compat.c | 189 ++++++++++++++++++++++++++++--------- 5 files changed, 165 insertions(+), 51 deletions(-)