diff options
| author | Jakub Kicinski <[email protected]> | 2021-01-04 14:02:02 -0800 |
|---|---|---|
| committer | Jakub Kicinski <[email protected]> | 2021-01-04 14:02:02 -0800 |
| commit | a8f33c038f4e50b0f47448cb6c6ca184c4f717ef (patch) | |
| tree | e05ccbd29e11a3500511914a2a03896a32a99df1 /init/init_task.c | |
| parent | 08ad4839ce34cea7b5ea4ac1867a08fe96709e1a (diff) | |
| parent | b4e70d8dd9ea6bd5d5fb3122586f652326ca09cd (diff) | |
Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf
Pablo Neira Ayuso says:
====================
Netfilter fixes for net
The following patchset contains Netfilter fixes for net:
1) Missing sanitization of rateest userspace string, bug has been
triggered by syzbot, patch from Florian Westphal.
2) Report EOPNOTSUPP on missing set features in nft_dynset, otherwise
error reporting to userspace via EINVAL is misleading since this is
reserved for malformed netlink requests.
3) New binaries with old kernels might silently accept several set
element expressions. New binaries set on the NFT_SET_EXPR and
NFT_DYNSET_F_EXPR flags to request for several expressions per
element, hence old kernels which do not support for this bail out
with EOPNOTSUPP.
* git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf:
netfilter: nftables: add set expression flags
netfilter: nft_dynset: report EOPNOTSUPP on missing set feature
netfilter: xt_RATEEST: reject non-null terminated string from userspace
====================
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Jakub Kicinski <[email protected]>
Diffstat (limited to 'init/init_task.c')
0 files changed, 0 insertions, 0 deletions