netfilter-devel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* [4.11.y netfilter] 4.11 iptables regression fix
@ 2017-06-21  8:41 Florian Westphal
  2017-06-27 11:30 ` Greg KH
  0 siblings, 1 reply; 2+ messages in thread
From: Florian Westphal @ 2017-06-21  8:41 UTC (permalink / raw)
  To: stable; +Cc: davem, pablo, netfilter-devel

Hi.

Please consider picking up

commit 324318f0248c31be8a08984146e7e4dd7cdd091d
Author: Willem de Bruijn <willemb@google.com>
netfilter: xtables: zero padding in data_to_user

After this, you will also need to pick

commit 751a9c763849f5859cb69ea44b0430d00672f637
Author: Willem de Bruijn <willemb@google.com>
netfilter: xtables: fix build failure from COMPAT_XT_ALIGN outside CONFIG_COMPAT

Both apply cleanly to 4.11.  Earlier kernels are not affected.

Without these two patches we fail to delete rules, e.g.

iptables -A INPUT -i lo -p icmp --icmp-type 1 -j ACCEPT
iptables -D INPUT -i lo -p icmp --icmp-type 1 -j ACCEPT

2nd command fails to delete the newly added rule.

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2017-06-27 11:30 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2017-06-21  8:41 [4.11.y netfilter] 4.11 iptables regression fix Florian Westphal
2017-06-27 11:30 ` Greg KH

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).