{"push_id":1635513431,"size":126,"distinct_size":120,"ref":"refs/heads/master","head":"ebe64824e9de4b3ab3bd3928312b4b2bc57b4b7e","before":"093b995e3b55a0ae0670226ddfcb05bfbf0099ae","commits":[{"sha":"1c2bcc766be44467809f1798cd4ceacafe20a852","author":{"name":"Sven Eckelmann","email":"9d878b831e8ad202268d6003fc179621a34463a2@narfation.org"},"message":"batman-adv: Keep fragments equally sized\n\nThe batman-adv fragmentation packets have the design problem that they\ncannot be refragmented and cannot handle padding by the underlying link.\nThe latter often leads to problems when networks are incorrectly configured\nand don't use a common MTU.\n\nThe sender could for example fragment a 1271 byte frame (plus external\nethernet header (14) and batadv unicast header (10)) to fit in a 1280 bytes\nlarge MTU of the underlying link (max. 1294 byte frames). This would create\na 1294 bytes large frame (fragment 2) and a 55 bytes large frame\n(fragment 1). The extra 54 bytes are the fragment header (20) added to each\nfragment and the external ethernet header (14) for the second fragment.\n\nLet us assume that the next hop is then not able to transport 1294 bytes to\nits next hop. The 1294 byte large frame will be dropped but the 55 bytes\nlarge fragment will still be forwarded to its destination.\n\nOr let us assume that the underlying hardware requires that each frame has\na minimum size (e.g. 60 bytes). Then it will pad the 55 bytes frame to 60\nbytes. The receiver of the 60 bytes frame will no longer be able to\ncorrectly assemble the two frames together because it is not aware that 5\nbytes of the 60 bytes frame are padding and don't belong to the reassembled\nframe.\n\nThis can partly be avoided by splitting frames more equally. In this\nexample, the 675 and 674 bytes large fragment frames could both potentially\nreach its destination without being too large or too small.\n\nReported-by: Martin Weinelt <martin@darmstadt.freifunk.net>\nFixes: ee75ed88879a (\"batman-adv: Fragment and send skbs larger than mtu\")\nSigned-off-by: Sven Eckelmann <sven@narfation.org>\nAcked-by: Linus Lüssing <linus.luessing@c0d3.blue>\nSigned-off-by: Simon Wunderlich <sw@simonwunderlich.de>","distinct":true,"url":"https://api.github.com/repos/FireBurn/linux/commits/1c2bcc766be44467809f1798cd4ceacafe20a852"},{"sha":"1a9070ec91b37234fe915849b767c61584c64a44","author":{"name":"Sven Eckelmann","email":"9d878b831e8ad202268d6003fc179621a34463a2@narfation.org"},"message":"batman-adv: Initialize gw sel_class via batadv_algo\n\nThe gateway selection class variable is shared between different algorithm\nversions. But the interpretation of the content is algorithm specific. The\ninitialization is therefore also algorithm specific.\n\nBut this was implemented incorrectly and the initialization for BATMAN_V\nalways overwrote the value previously written for BATMAN_IV. This could\nonly be avoided when BATMAN_V was disabled during compile time.\n\nUsing a special batadv_algo hook for this initialization avoids this\nproblem.\n\nFixes: 50164d8f500f (\"batman-adv: B.A.T.M.A.N. V - implement GW selection logic\")\nSigned-off-by: Sven Eckelmann <sven@narfation.org>\nSigned-off-by: Simon Wunderlich <sw@simonwunderlich.de>","distinct":true,"url":"https://api.github.com/repos/FireBurn/linux/commits/1a9070ec91b37234fe915849b767c61584c64a44"},{"sha":"68598d2ea886322f9b4b0058e5b288418622de95","author":{"name":"Dmitry V. Levin","email":"8abf795b9c32114ac36b70a08695870193305250@altlinux.org"},"message":"btrfs: remove btrfs_err_str function from uapi/linux/btrfs.h\n\nbtrfs_err_str function is not called from anywhere and is replicated\nin the userspace headers for btrfs-progs.\n\nIt's removal also fixes the following linux/btrfs.h userspace\ncompilation error:\n\n/usr/include/linux/btrfs.h: In function 'btrfs_err_str':\n/usr/include/linux/btrfs.h:740:11: error: 'NULL' undeclared (first use in this function)\n    return NULL;\n\nSuggested-by: Jeff Mahoney <jeffm@suse.com>\nSigned-off-by: Dmitry V. Levin <ldv@altlinux.org>\nReviewed-by: David Sterba <dsterba@suse.com>\nSigned-off-by: David Sterba <dsterba@suse.com>","distinct":true,"url":"https://api.github.com/repos/FireBurn/linux/commits/68598d2ea886322f9b4b0058e5b288418622de95"},{"sha":"45838660e34d90db8d4f7cbc8fd66e8aff79f4fe","author":{"name":"Kai-Heng Feng","email":"49d050d7a2ceecc3a608b6160348d55167459976@canonical.com"},"message":"Input: i8042 - add noloop quirk for Dell Embedded Box PC 3000\n\nThe aux port does not get detected without noloop quirk, so external PS/2\nmouse cannot work as result.\n\nThe PS/2 mouse can work with this quirk.\n\nBugLink: https://bugs.launchpad.net/bugs/1591053\nSigned-off-by: Kai-Heng Feng <kai.heng.feng@canonical.com>\nReviewed-by: Marcos Paulo de Souza <marcos.souza.org@gmail.com>\nCc: stable@vger.kernel.org\nSigned-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>","distinct":true,"url":"https://api.github.com/repos/FireBurn/linux/commits/45838660e34d90db8d4f7cbc8fd66e8aff79f4fe"},{"sha":"7b4fdf77a450ec0fdcb2f677b080ddbf2c186544","author":{"name":"Florian Westphal","email":"dbfaf6a80dfd937969ef4cfe4989863cfe354fce@strlen.de"},"message":"netfilter: don't track fragmented packets\n\nAndrey reports syzkaller splat caused by\n\nNF_CT_ASSERT(!ip_is_fragment(ip_hdr(skb)));\n\nin ipv4 nat.  But this assertion (and the comment) are wrong, this function\ndoes see fragments when IP_NODEFRAG setsockopt is used.\n\nAs conntrack doesn't track packets without complete l4 header, only the\nfirst fragment is tracked.\n\nBecause applying nat to first packet but not the rest makes no sense this\nalso turns off tracking of all fragments.\n\nReported-by: Andrey Konovalov <andreyknvl@google.com>\nSigned-off-by: Florian Westphal <fw@strlen.de>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","distinct":true,"url":"https://api.github.com/repos/FireBurn/linux/commits/7b4fdf77a450ec0fdcb2f677b080ddbf2c186544"},{"sha":"8e05ba7f848475bdc3aa546cf88418f7e51a6671","author":{"name":"Ying Xue","email":"13e85c07db42396372f9f9dd46325389736aeab1@windriver.com"},"message":"netfilter: nf_nat_sctp: fix ICMP packet to be dropped accidently\n\nRegarding RFC 792, the first 64 bits of the original SCTP datagram's\ndata could be contained in ICMP packet, such as:\n\n    0                   1                   2                   3\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n   |     Type      |     Code      |          Checksum             |\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n   |                             unused                            |\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n   |      Internet Header + 64 bits of Original Data Datagram      |\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n\nHowever, according to RFC 4960, SCTP datagram header is as below:\n\n    0                   1                   2                   3\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n   |     Source Port Number        |     Destination Port Number   |\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n   |                      Verification Tag                         |\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n   |                           Checksum                            |\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n\nIt means only the first three fields of SCTP header can be carried in\nICMP packet except for Checksum field.\n\nAt present in sctp_manip_pkt(), no matter whether the packet is ICMP or\nnot, it always calculates SCTP packet checksum. However, not only the\ncalculation of checksum is unnecessary for ICMP, but also it causes\nanother fatal issue that ICMP packet is dropped. The header size of\nSCTP is used to identify whether the writeable length of skb is bigger\nthan skb->len through skb_make_writable() in sctp_manip_pkt(). But\nwhen it deals with ICMP packet, skb_make_writable() directly returns\nfalse as the writeable length of skb is bigger than skb->len.\nSubsequently ICMP is dropped.\n\nNow we correct this misbahavior. When sctp_manip_pkt() handles ICMP\npacket, 8 bytes rather than the whole SCTP header size is used to check\nif writeable length of skb is overflowed. Meanwhile, as it's meaningless\nto calculate checksum when packet is ICMP, the computation of checksum\nis ignored as well.\n\nSigned-off-by: Ying Xue <ying.xue@windriver.com>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","distinct":true,"url":"https://api.github.com/repos/FireBurn/linux/commits/8e05ba7f848475bdc3aa546cf88418f7e51a6671"},{"sha":"568af6de058cb2b0c5b98d98ffcf37cdc6bc38a7","author":{"name":"Pablo Neira Ayuso","email":"e233074affeb074ecf6c27664a0f4073308430fb@netfilter.org"},"message":"netfilter: nf_tables: set pktinfo->thoff at AH header if found\n\nPhil Sutter reports that IPv6 AH header matching is broken. From\nuserspace, nft generates bytecode that expects to find the AH header at\nNFT_PAYLOAD_TRANSPORT_HEADER both for IPv4 and IPv6. However,\npktinfo->thoff is set to the inner header after the AH header in IPv6,\nwhile in IPv4 pktinfo->thoff points to the AH header indeed. This\nbehaviour is inconsistent. This patch fixes this problem by updating\nipv6_find_hdr() to get the IP6_FH_F_AUTH flag so this function stops at\nthe AH header, so both IPv4 and IPv6 pktinfo->thoff point to the AH\nheader.\n\nThis is also inconsistent when trying to match encapsulated headers:\n\n1) A packet that looks like IPv4 + AH + TCP dport 22 will *not* match.\n2) A packet that looks like IPv6 + AH + TCP dport 22 will match.\n\nReported-by: Phil Sutter <phil@nwl.cc>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","distinct":true,"url":"https://api.github.com/repos/FireBurn/linux/commits/568af6de058cb2b0c5b98d98ffcf37cdc6bc38a7"},{"sha":"b6573da139ecbee6f2c77392b51266d4521d50ac","author":{"name":"Benjamin Tissoires","email":"ace37d3dd488d1f8efb492bba0263a7c3c3d861c@redhat.com"},"message":"Input: synaptics-rmi4 - prevent null pointer dereference in f30\n\nIf the platform data has f30_data.disable set, f30 in rmi_f30_config()\nmight be null. Prevent a kernel oops by checking for non-null f30.\n\nSigned-off-by: Benjamin Tissoires <benjamin.tissoires@redhat.com>\nSigned-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>","distinct":true,"url":"https://api.github.com/repos/FireBurn/linux/commits/b6573da139ecbee6f2c77392b51266d4521d50ac"},{"sha":"a4c2a13129f7c5bcf81704c06851601593303fd5","author":{"name":"Dmitry Torokhov","email":"e82e0cc9230e3683c557741cb5a2c8321ee072ee@gmail.com"},"message":"Input: i8042 - add TUXEDO BU1406 (N24_25BU) to the nomux list\n\nTUXEDO BU1406 does not implement active multiplexing mode properly,\nand takes around 550 ms in i8042_set_mux_mode(). Given that the\ndevice does not have external AUX port, there is no downside in\ndisabling the MUX mode.\n\nReported-by: Paul Menzel <pmenzel@molgen.mpg.de>\nSuggested-by: Vojtech Pavlik <vojtech@suse.cz>\nReviewed-by: Marcos Paulo de Souza <marcos.souza.org@gmail.com>\nSigned-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>","distinct":true,"url":"https://api.github.com/repos/FireBurn/linux/commits/a4c2a13129f7c5bcf81704c06851601593303fd5"},{"sha":"92ef6f97a66e580189a41a132d0f8a9f78d6ddce","author":{"name":"Matjaz Hegedic","email":"e0cfea1756dd35a66e35caf97768514176e46e30@gmail.com"},"message":"Input: elan_i2c - add ASUS EeeBook X205TA special touchpad fw\n\nEeeBook X205TA is yet another ASUS device with a special touchpad\nfirmware that needs to be accounted for during initialization, or\nelse the touchpad will go into an invalid state upon suspend/resume.\nAdding the appropriate ic_type and product_id check fixes the problem.\n\nSigned-off-by: Matjaz Hegedic <matjaz.hegedic@gmail.com>\nAcked-by: KT Liao <kt.liao@emc.com.tw>\nCc: stable@vger.kernel.org\nSigned-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>","distinct":true,"url":"https://api.github.com/repos/FireBurn/linux/commits/92ef6f97a66e580189a41a132d0f8a9f78d6ddce"},{"sha":"fd89b23a4632d3cbdee398048497e026edadfb71","author":{"name":"Liping Zhang","email":"5172c2e8f5e3c16ed9d51bfc012aefe573d818e4@gmail.com"},"message":"netfilter: nft_set_bitmap: fetch the element key based on the set->klen\n\nCurrently we just assume the element key as a u32 integer, regardless of\nthe set key length.\n\nThis is incorrect, for example, the tcp port number is only 16 bits.\nSo when we use the nft_payload expr to get the tcp dport and store\nit to dreg, the dport will be stored at 0~15 bits, and 16~31 bits\nwill be padded with zero.\n\nSo the reg->data[dreg] will be looked like as below:\n  0          15           31\n  +-+-+-+-+-+-+-+-+-+-+-+-+\n  | tcp dport |      0    |\n  +-+-+-+-+-+-+-+-+-+-+-+-+\nBut for these big-endian systems, if we treate this register as a u32\ninteger, the element key will be larger than 65535, so the following\nlookup in bitmap set will cause out of bound access.\n\nAnother issue is that if we add element with comments in bitmap\nset(although the comments will be ignored eventually), the element will\nvanish strangely. Because we treate the element key as a u32 integer, so\nthe comments will become the part of the element key, then the element\nkey will also be larger than 65535 and out of bound access will happen:\n  # nft add element t s { 1 comment test }\n\nSince set->klen is 1 or 2, it's fine to treate the element key as a u8 or\nu16 integer.\n\nFixes: 665153ff5752 (\"netfilter: nf_tables: add bitmap set type\")\nSigned-off-by: Liping Zhang <zlpnobody@gmail.com>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","distinct":true,"url":"https://api.github.com/repos/FireBurn/linux/commits/fd89b23a4632d3cbdee398048497e026edadfb71"},{"sha":"10596608c4d62cb8c1c2b806debcbd32fe657e71","author":{"name":"Liping Zhang","email":"5172c2e8f5e3c16ed9d51bfc012aefe573d818e4@gmail.com"},"message":"netfilter: nf_tables: fix mismatch in big-endian system\n\nCurrently, there are two different methods to store an u16 integer to\nthe u32 data register. For example:\n  u32 *dest = &regs->data[priv->dreg];\n  1. *dest = 0; *(u16 *) dest = val_u16;\n  2. *dest = val_u16;\n\nFor method 1, the u16 value will be stored like this, either in\nbig-endian or little-endian system:\n  0          15           31\n  +-+-+-+-+-+-+-+-+-+-+-+-+\n  |   Value   |     0     |\n  +-+-+-+-+-+-+-+-+-+-+-+-+\n\nFor method 2, in little-endian system, the u16 value will be the same\nas listed above. But in big-endian system, the u16 value will be stored\nlike this:\n  0          15           31\n  +-+-+-+-+-+-+-+-+-+-+-+-+\n  |     0     |   Value   |\n  +-+-+-+-+-+-+-+-+-+-+-+-+\n\nSo later we use \"memcmp(&regs->data[priv->sreg], data, 2);\" to do\ncompare in nft_cmp, nft_lookup expr ..., method 2 will get the wrong\nresult in big-endian system, as 0~15 bits will always be zero.\n\nFor the similar reason, when loading an u16 value from the u32 data\nregister, we should use \"*(u16 *) sreg;\" instead of \"(u16)*sreg;\",\nthe 2nd method will get the wrong value in the big-endian system.\n\nSo introduce some wrapper functions to store/load an u8 or u16\ninteger to/from the u32 data register, and use them in the right\nplace.\n\nSigned-off-by: Liping Zhang <zlpnobody@gmail.com>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","distinct":true,"url":"https://api.github.com/repos/FireBurn/linux/commits/10596608c4d62cb8c1c2b806debcbd32fe657e71"},{"sha":"4ca60d08cbe65f501baad64af50fceba79c19fbb","author":{"name":"Florian Westphal","email":"dbfaf6a80dfd937969ef4cfe4989863cfe354fce@strlen.de"},"message":"netfilter: bridge: honor frag_max_size when refragmenting\n\nconsider a bridge with mtu 9000, but end host sending smaller\npackets to another host with mtu < 9000.\n\nIn this case, after reassembly, bridge+defrag would refragment,\nand then attempt to send the reassembled packet as long as it\nwas below 9k.\n\nInstead we have to cap by the largest fragment size seen.\n\nSigned-off-by: Florian Westphal <fw@strlen.de>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","distinct":true,"url":"https://api.github.com/repos/FireBurn/linux/commits/4ca60d08cbe65f501baad64af50fceba79c19fbb"},{"sha":"170a1fb9c01bc40b7e8fd57a32ac9a0e131ec5b6","author":{"name":"Steven Rostedt (VMware)","email":"9f626a07de58780741a9085807c77fd646ef3459@goodmis.org"},"message":"netfilter: Force fake conntrack entry to be at least 8 bytes aligned\n\nSince the nfct and nfctinfo have been combined, the nf_conn structure\nmust be at least 8 bytes aligned, as the 3 LSB bits are used for the\nnfctinfo. But there's a fake nf_conn structure to denote untracked\nconnections, which is created by a PER_CPU construct. This does not\nguarantee that it will be 8 bytes aligned and can break the logic in\ndetermining the correct nfctinfo.\n\nI triggered this on a 32bit machine with the following error:\n\nBUG: unable to handle kernel NULL pointer dereference at 00000af4\nIP: nf_ct_deliver_cached_events+0x1b/0xfb\n*pdpt = 0000000031962001 *pde = 0000000000000000\n\nOops: 0000 [#1] SMP\n[Modules linked in: ip6t_REJECT nf_reject_ipv6 nf_conntrack_ipv6 nf_defrag_ipv6 ip6table_filter ip6_tables ipv6 crc_ccitt ppdev r8169 parport_pc parport\n  OK  ]\nCPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.10.0-test+ #75\nHardware name: MSI MS-7823/CSM-H87M-G43 (MS-7823), BIOS V1.6 02/22/2014\ntask: c126ec00 task.stack: c1258000\nEIP: nf_ct_deliver_cached_events+0x1b/0xfb\nEFLAGS: 00010202 CPU: 0\nEAX: 0021cd01 EBX: 00000000 ECX: 27b0c767 EDX: 32bcb17a\nESI: f34135c0 EDI: f34135c0 EBP: f2debd60 ESP: f2debd3c\n DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068\nCR0: 80050033 CR2: 00000af4 CR3: 309a0440 CR4: 001406f0\nCall Trace:\n <SOFTIRQ>\n ? ipv6_skip_exthdr+0xac/0xcb\n ipv6_confirm+0x10c/0x119 [nf_conntrack_ipv6]\n nf_hook_slow+0x22/0xc7\n nf_hook+0x9a/0xad [ipv6]\n ? ip6t_do_table+0x356/0x379 [ip6_tables]\n ? ip6_fragment+0x9e9/0x9e9 [ipv6]\n ip6_output+0xee/0x107 [ipv6]\n ? ip6_fragment+0x9e9/0x9e9 [ipv6]\n dst_output+0x36/0x4d [ipv6]\n NF_HOOK.constprop.37+0xb2/0xba [ipv6]\n ? icmp6_dst_alloc+0x2c/0xfd [ipv6]\n ? local_bh_enable+0x14/0x14 [ipv6]\n mld_sendpack+0x1c5/0x281 [ipv6]\n ? mark_held_locks+0x40/0x5c\n mld_ifc_timer_expire+0x1f6/0x21e [ipv6]\n call_timer_fn+0x135/0x283\n ? detach_if_pending+0x55/0x55\n ? mld_dad_timer_expire+0x3e/0x3e [ipv6]\n __run_timers+0x111/0x14b\n ? mld_dad_timer_expire+0x3e/0x3e [ipv6]\n run_timer_softirq+0x1c/0x36\n __do_softirq+0x185/0x37c\n ? test_ti_thread_flag.constprop.19+0xd/0xd\n do_softirq_own_stack+0x22/0x28\n </SOFTIRQ>\n irq_exit+0x5a/0xa4\n smp_apic_timer_interrupt+0x2a/0x34\n apic_timer_interrupt+0x37/0x3c\n\nBy using DEFINE/DECLARE_PER_CPU_ALIGNED we can enforce at least 8 byte\nalignment as all cache line sizes are at least 8 bytes or more.\n\nFixes: a9e419dc7be6 (\"netfilter: merge ctinfo into nfct pointer storage area\")\nSigned-off-by: Steven Rostedt (VMware) <rostedt@goodmis.org>\nAcked-by: Florian Westphal <fw@strlen.de>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","distinct":true,"url":"https://api.github.com/repos/FireBurn/linux/commits/170a1fb9c01bc40b7e8fd57a32ac9a0e131ec5b6"},{"sha":"e920dde5160887d07b738f5a7f593b1fa9b1e32e","author":{"name":"Pablo Neira Ayuso","email":"e233074affeb074ecf6c27664a0f4073308430fb@netfilter.org"},"message":"netfilter: nft_set_bitmap: keep a list of dummy elements\n\nElement comments may come without any prior set flag, so we have to keep\na list of dummy struct nft_set_ext to keep this information around. This\nis only useful for set dumps to userspace. From the packet path, this\nset type relies on the bitmap representation. This patch simplifies the\nlogic since we don't need to allocate the dummy nft_set_ext structure\nanymore on the fly at the cost of increasing memory consumption because\nof the list of dummy struct nft_set_ext.\n\nFixes: 665153ff5752 (\"netfilter: nf_tables: add bitmap set type\")\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","distinct":true,"url":"https://api.github.com/repos/FireBurn/linux/commits/e920dde5160887d07b738f5a7f593b1fa9b1e32e"},{"sha":"04166f48d9593af4513ae06c0f966c0cee300a20","author":{"name":"Pablo Neira Ayuso","email":"e233074affeb074ecf6c27664a0f4073308430fb@netfilter.org"},"message":"Revert \"netfilter: nf_tables: add flush field to struct nft_set_iter\"\n\nThis reverts commit 1f48ff6c5393aa7fe290faf5d633164f105b0aa7.\n\nThis patch is not required anymore now that we keep a dummy list of\nset elements in the bitmap set implementation, so revert this before\nwe forget this code has no clients.\n\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","distinct":true,"url":"https://api.github.com/repos/FireBurn/linux/commits/04166f48d9593af4513ae06c0f966c0cee300a20"},{"sha":"4494dbc6dec37817f2cc2aa7604039a9e87ada18","author":{"name":"Liping Zhang","email":"5172c2e8f5e3c16ed9d51bfc012aefe573d818e4@gmail.com"},"message":"netfilter: nft_ct: do cleanup work when NFTA_CT_DIRECTION is invalid\n\nWe should jump to invoke __nft_ct_set_destroy() instead of just\nreturn error.\n\nFixes: edee4f1e9245 (\"netfilter: nft_ct: add zone id set support\")\nSigned-off-by: Liping Zhang <zlpnobody@gmail.com>\nAcked-by: Florian Westphal <fw@strlen.de>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","distinct":true,"url":"https://api.github.com/repos/FireBurn/linux/commits/4494dbc6dec37817f2cc2aa7604039a9e87ada18"},{"sha":"fe8daf5fa715f7214952f06a387e4b7de818c5be","author":{"name":"Taku Izumi","email":"45a1829c2048cb51c0e93ecf94acb14e4b23613b@jp.fujitsu.com"},"message":"fjes: Fix wrong netdevice feature flags\n\nThis patch fixes netdev->features for Extended Socket network device.\n\nCurrently Extended Socket network device's netdev->feature claims\nNETIF_F_HW_CSUM, however this is completely wrong. There's no feature\nof checksum offloading.\nThat causes invalid TCP/UDP checksum and packet rejection when IP\nforwarding from Extended Socket network device to other network device.\n\nNETIF_F_HW_CSUM should be omitted.\n\nSigned-off-by: Taku Izumi <izumi.taku@jp.fujitsu.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/FireBurn/linux/commits/fe8daf5fa715f7214952f06a387e4b7de818c5be"},{"sha":"3d20f1f7bd575d147ffa75621fa560eea0aec690","author":{"name":"Or Gerlitz","email":"1d5567bccfc6dd59c6f26cddb2897fb0786c20af@mellanox.com"},"message":"net/openvswitch: Set the ipv6 source tunnel key address attribute correctly\n\nWhen dealing with ipv6 source tunnel key address attribute\n(OVS_TUNNEL_KEY_ATTR_IPV6_SRC) we are wrongly setting the tunnel\ndst ip, fix that.\n\nFixes: 6b26ba3a7d95 ('openvswitch: netlink attributes for IPv6 tunneling')\nSigned-off-by: Or Gerlitz <ogerlitz@mellanox.com>\nReported-by: Paul Blakey <paulb@mellanox.com>\nAcked-by: Jiri Benc <jbenc@redhat.com>\nAcked-by: Joe Stringer <joe@ovn.org>\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/FireBurn/linux/commits/3d20f1f7bd575d147ffa75621fa560eea0aec690"},{"sha":"e11607aad5edf4c41617a27291731c660f7d519d","author":{"name":"David S. Miller","email":"79caf591e37e1438a2d55ae59670d5cd0d717764@davemloft.net"},"message":"Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf\n\nPablo Neira Ayuso says:\n\n====================\nNetfilter fixes for net\n\nThe following patchset contains Netfilter fixes for your net tree, a\nrather large batch of fixes targeted to nf_tables, conntrack and bridge\nnetfilter. More specifically, they are:\n\n1) Don't track fragmented packets if the socket option IP_NODEFRAG is set.\n   From Florian Westphal.\n\n2) SCTP protocol tracker assumes that ICMP error messages contain the\n   checksum field, what results in packet drops. From Ying Xue.\n\n3) Fix inconsistent handling of AH traffic from nf_tables.\n\n4) Fix new bitmap set representation with big endian. Fix mismatches in\n   nf_tables due to incorrect big endian handling too. Both patches\n   from Liping Zhang.\n\n5) Bridge netfilter doesn't honor maximum fragment size field, cap to\n   largest fragment seen. From Florian Westphal.\n\n6) Fake conntrack entry needs to be aligned to 8 bytes since the 3 LSB\n   bits are now used to store the ctinfo. From Steven Rostedt.\n\n7) Fix element comments with the bitmap set type. Revert the flush\n   field in the nft_set_iter structure, not required anymore after\n   fixing up element comments.\n\n8) Missing error on invalid conntrack direction from nft_ct, also from\n   Liping Zhang.\n====================\n\nSigned-off-by: David S. Miller <davem@davemloft.net>","distinct":true,"url":"https://api.github.com/repos/FireBurn/linux/commits/e11607aad5edf4c41617a27291731c660f7d519d"}]}
{"actor":{"display_login":"FireBurn"}}