From: Pablo Neira Ayuso <pablo@netfilter.org>
To: netfilter-devel@vger.kernel.org
Cc: davem@davemloft.net, netdev@vger.kernel.org
Subject: [PATCH 0/5] Netfilter fixes for net-next
Date: Thu, 6 Oct 2016 02:07:44 +0200 [thread overview]
Message-ID: <1475712469-17000-1-git-send-email-pablo@netfilter.org> (raw)
Hi David,
This is a pull request to address fallout from previous nf-next pull
request, only fixes going on here:
1) Address a potential null dereference in nf_unregister_net_hook()
when becomes nf_hook_entry_head is NULL, from Aaron Conole.
2) Missing ifdef for CONFIG_NETFILTER_INGRESS, also from Aaron.
3) Fix linking problems in xt_hashlimit in x86_32, from Pai.
4) Fix permissions of nf_log sysctl from unpriviledge netns, from
Jann Horn.
5) Fix possible divide by zero in nft_limit, from Liping Zhang.
You can pull these changes from:
git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next.git
P.S: Sorry for not addressing this any sooner, a mixture of traveling
overhead, conference and problems with wifi connection has prevented me
to do this any sooner.
Thanks!
----------------------------------------------------------------
The following changes since commit 803783849fed11e38a30f31932c02c815520da70:
mlx5: Add ndo_poll_controller() implementation (2016-09-30 02:11:16 -0400)
are available in the git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next.git HEAD
for you to fetch changes up to 2fa46c130193300f06e68727ae98ec9f6184cad4:
netfilter: nft_limit: fix divided by zero panic (2016-10-04 08:59:03 +0200)
----------------------------------------------------------------
Aaron Conole (2):
netfilter: Fix potential null pointer dereference
netfilter: accommodate different kconfig in nf_set_hooks_head
Jann Horn (1):
netfilter: fix namespace handling in nf_log_proc_dostring
Liping Zhang (1):
netfilter: nft_limit: fix divided by zero panic
Vishwanath Pai (1):
netfilter: xt_hashlimit: Fix link error in 32bit arch because of 64bit division
net/netfilter/core.c | 17 ++++++++++++-----
net/netfilter/nf_log.c | 6 ++++--
net/netfilter/nft_limit.c | 4 ++--
net/netfilter/xt_hashlimit.c | 15 ++++++++-------
4 files changed, 26 insertions(+), 16 deletions(-)
next reply other threads:[~2016-10-06 0:08 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2016-10-06 0:07 Pablo Neira Ayuso [this message]
2016-10-06 0:07 ` [PATCH 1/5] netfilter: Fix potential null pointer dereference Pablo Neira Ayuso
2016-10-06 0:07 ` [PATCH 2/5] netfilter: accommodate different kconfig in nf_set_hooks_head Pablo Neira Ayuso
2016-10-06 0:07 ` [PATCH 3/5] netfilter: xt_hashlimit: Fix link error in 32bit arch because of 64bit division Pablo Neira Ayuso
2016-10-06 0:07 ` [PATCH 4/5] netfilter: fix namespace handling in nf_log_proc_dostring Pablo Neira Ayuso
2016-10-06 0:07 ` [PATCH 5/5] netfilter: nft_limit: fix divided by zero panic Pablo Neira Ayuso
2016-10-06 0:26 ` [PATCH 0/5] Netfilter fixes for net-next David Miller
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1475712469-17000-1-git-send-email-pablo@netfilter.org \
--to=pablo@netfilter.org \
--cc=davem@davemloft.net \
--cc=netdev@vger.kernel.org \
--cc=netfilter-devel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).