Changes in nft_fib_netdev.c

3c1eb413 - netfilter: nft_fib: add reduce support

Mon, 14 Mar 2022 17:23:12 +0000

netfilter: nft_fib: add reduce supportThe fib expression stores to a register, so we can't add empty stub.Check that the register that is being written is in fact redundant.In most cases, this is expected to cancel tracking as re-use isunlikely.Signed-off-by: Florian Westphal Signed-off-by: Pablo Neira Ayuso List of files: /linux-6.15/net/netfilter/nft_fib_netdev.c

4cacc395 - netfilter: Add MODULE_DESCRIPTION entries to kernel modules

Sun, 21 Jun 2020 05:27:36 +0000

netfilter: Add MODULE_DESCRIPTION entries to kernel modulesThe user tool modinfo is used to get information on kernel modules, including adescription where it is available.This patch adds a brief MODULE_DESCRIPTION to netfilter kernel modules(descriptions taken from Kconfig file or code comments)Signed-off-by: Rob Gill Signed-off-by: Pablo Neira Ayuso List of files: /linux-6.15/net/netfilter/nft_fib_netdev.c

88209141 - netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabled

Fri, 30 Aug 2019 18:13:53 +0000

netfilter: nft_fib_netdev: Terminate rule eval if protocol=IPv6 and ipv6 module is disabledIf IPv6 is disabled on boot (ipv6.disable=1), but nft_fib_inet ends updealing with a IPv6 packet, it causes a kernel panic infib6_node_lookup_1(), crashing in bad_page_fault.The panic is caused by trying to deference a very low address (0x38in ppc64le), due to ipv6.fib6_main_tbl = NULL.BUG: Kernel NULL pointer dereference at 0x00000038The kernel panic was reproduced in a host that disabled IPv6 on boot andhave to process guest packets (coming from a bridge) using it's ip6tables.Terminate rule evaluation when packet protocol is IPv6 but the ipv6 moduleis not loaded.Signed-off-by: Leonardo Bras Acked-by: Florian Westphal Signed-off-by: Pablo Neira Ayuso List of files: /linux-6.15/net/netfilter/nft_fib_netdev.c

d2912cb1 - treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

Tue, 04 Jun 2019 08:11:33 +0000

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500Based on 2 normalized pattern(s): this program is free software you can redistribute it and or modify it under the terms of the gnu general public license version 2 as published by the free software foundation this program is free software you can redistribute it and or modify it under the terms of the gnu general public license version 2 as published by the free software foundation #extracted by the scancode license scanner the SPDX license identifier GPL-2.0-onlyhas been chosen to replace the boilerplate/reference in 4122 file(s).Signed-off-by: Thomas Gleixner Reviewed-by: Enrico Weigelt Reviewed-by: Kate Stewart Reviewed-by: Allison Randal Cc: linux-spdx@vger.kernel.orgLink: https://lkml.kernel.org/r/20190604081206.933168790@linutronix.deSigned-off-by: Greg Kroah-Hartman List of files: /linux-6.15/net/netfilter/nft_fib_netdev.c

6392c226 - netfilter: nf_tables: add fib expression to the netdev family

Thu, 20 Jul 2017 23:54:38 +0000

netfilter: nf_tables: add fib expression to the netdev familyAdd fib expression support for netdev family. Like inet family, netdevdelegates the actual decision to the corresponding backend, either ipv4or ipv6.This allows to perform very early reverse path filtering, among otherthings.You can find more information about fib expression in the f6d0cbcf09c5("") commit message.Signed-off-by: Pablo M. Bermudo Garay Signed-off-by: Pablo Neira Ayuso List of files: /linux-6.15/net/netfilter/nft_fib_netdev.c