From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-13.0 required=3.0 tests=HEADER_FROM_DIFFERENT_DOMAINS,INCLUDES_PULL_REQUEST,MAILING_LIST_MULTI, MENTIONS_GIT_HOSTING,SPF_PASS,USER_AGENT_GIT autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 205DBC169C4 for ; Mon, 11 Feb 2019 16:53:30 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id EC17621B69 for ; Mon, 11 Feb 2019 16:53:29 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1727192AbfBKQx2 (ORCPT ); Mon, 11 Feb 2019 11:53:28 -0500 Received: from mail.us.es ([193.147.175.20]:43852 "EHLO mail.us.es" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1727007AbfBKQx0 (ORCPT ); Mon, 11 Feb 2019 11:53:26 -0500 Received: from antivirus1-rhel7.int (unknown [192.168.2.11]) by mail.us.es (Postfix) with ESMTP id AF3B01B8411 for ; Mon, 11 Feb 2019 17:53:24 +0100 (CET) Received: from antivirus1-rhel7.int (localhost [127.0.0.1]) by antivirus1-rhel7.int (Postfix) with ESMTP id A2DA6FC5EC for ; Mon, 11 Feb 2019 17:53:24 +0100 (CET) Received: by antivirus1-rhel7.int (Postfix, from userid 99) id A1BC6FC5E9; Mon, 11 Feb 2019 17:53:24 +0100 (CET) Received: from antivirus1-rhel7.int (localhost [127.0.0.1]) by antivirus1-rhel7.int (Postfix) with ESMTP id B2AC5FC5F5; Mon, 11 Feb 2019 17:53:22 +0100 (CET) Received: from 192.168.1.97 (192.168.1.97) by antivirus1-rhel7.int (F-Secure/fsigk_smtp/550/antivirus1-rhel7.int); Mon, 11 Feb 2019 17:53:22 +0100 (CET) X-Virus-Status: clean(F-Secure/fsigk_smtp/550/antivirus1-rhel7.int) Received: from salvia.here (sys.soleta.eu [212.170.55.40]) (Authenticated sender: pneira@us.es) by entrada.int (Postfix) with ESMTPA id 8348C4265A2F; Mon, 11 Feb 2019 17:53:22 +0100 (CET) X-SMTPAUTHUS: auth mail.us.es From: Pablo Neira Ayuso To: netfilter-devel@vger.kernel.org Cc: davem@davemloft.net, netdev@vger.kernel.org Subject: [PATCH 0/2] Netfilter fixes for net Date: Mon, 11 Feb 2019 17:53:17 +0100 Message-Id: <20190211165319.17965-1-pablo@netfilter.org> X-Mailer: git-send-email 2.11.0 X-Virus-Scanned: ClamAV using ClamSMTP Sender: netdev-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: netdev@vger.kernel.org Hi David, The following patchset contains Netfilter fixes for net: 1) Out-of-bound access to packet data from the snmp nat helper, from Jann Horn. 2) ICMP(v6) error packets are set as related traffic by conntrack, update protocol number before calling nf_nat_ipv4_manip_pkt() to use ICMP(v6) rather than the original protocol number, from Florian Westphal. You can pull these changes from: git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git Thanks! ---------------------------------------------------------------- The following changes since commit 31b58ad0c3279817cd246eab27eaf53b626dfcde: Merge branch 'r8169-revert-two-commits-due-to-a-regression' (2019-02-10 12:54:49 -0800) are available in the git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git HEAD for you to fetch changes up to 8303b7e8f018724a2cd7752eb29c2801fa8c4067: netfilter: nat: fix spurious connection timeouts (2019-02-11 17:43:17 +0100) ---------------------------------------------------------------- Florian Westphal (1): netfilter: nat: fix spurious connection timeouts Jann Horn (1): netfilter: nf_nat_snmp_basic: add missing length checks in ASN.1 cbs net/ipv4/netfilter/nf_nat_l3proto_ipv4.c | 1 + net/ipv4/netfilter/nf_nat_snmp_basic_main.c | 7 ++++++- net/ipv6/netfilter/nf_nat_l3proto_ipv6.c | 1 + 3 files changed, 8 insertions(+), 1 deletion(-)