Re: [PATCH net 01/14] netfilter: replace skb_try_make_writable() by skb_ensure_writable()

patchwork-bot+netdevbpf
2026-05-01T23:51:09Z

Hello:

This series was applied to netdev/net.git (main)
by Pablo Neira Ayuso <pablo@netfilter.org>:

On Fri, 1 May 2026 14:22:24 +0200 you wrote:
> skb_try_make_writable() only works on clones and uncloned packets might
> have their network header in paged fragments.
>
> nft_fwd needs to work for the ingress and egress hooks, but the egress
> hook where skb->data points to the mac header, use skb_network_offset()
> to include the mac header. The flowtable is fine since it already uses
> the transport offset.
>
> [...]

Here is the summary with links:
- [net,01/14] netfilter: replace skb_try_make_writable() by skb_ensure_writable()
https://git.kernel.org/netdev/net/c/1049970d7583
- [net,02/14] netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding
https://git.kernel.org/netdev/net/c/0a0b35f0bf10
- [net,03/14] netfilter: nft_fwd_netdev: use recursion counter in neigh egress path
https://git.kernel.org/netdev/net/c/1d47b55b36d2
- [net,04/14] netfilter: x_tables: add .check_hooks to matches and targets
https://git.kernel.org/netdev/net/c/6813985ca456
- [net,05/14] netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate
https://git.kernel.org/netdev/net/c/2f768d638d97
- [net,06/14] netfilter: xt_CT: fix usersize for v1 and v2 revision
https://git.kernel.org/netdev/net/c/8bedb6c46945
- [net,07/14] netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables
https://git.kernel.org/netdev/net/c/63bac0278603
- [net,08/14] netfilter: nf_socket: skip socket lookup for non-first fragments
https://git.kernel.org/netdev/net/c/0bf00859d7a5
- [net,09/14] netfilter: nf_tables: skip L4 header parsing for non-first fragments
https://git.kernel.org/netdev/net/c/009d203e56db
- [net,10/14] netfilter: xtables: fix L4 header parsing for non-first fragments
https://git.kernel.org/netdev/net/c/952e121c9613
- [net,11/14] netfilter: flowtable: ensure sufficient headroom in xmit path
https://git.kernel.org/netdev/net/c/ef4f741e8627
- [net,12/14] netfilter: flowtable: fix inline vlan encapsulation in xmit path
https://git.kernel.org/netdev/net/c/a177ae30f786
- [net,13/14] netfilter: flowtable: fix inline pppoe encapsulation in xmit path
https://git.kernel.org/netdev/net/c/69c54f80f4a7
- [net,14/14] netfilter: flowtable: use skb_pull_rcsum() to pop vlan/pppoe header
https://git.kernel.org/netdev/net/c/baa3c65435fb

You are awesome, thank you!
--
Deet-doot-dot, I am a bot.