{"push_id":2649682595,"size":98,"distinct_size":98,"ref":"refs/heads/master","head":"9215310cf13bccfe777500986d562d53bdb63537","before":"8d1e5133bf260aabdf2cc6facd4a8e696414d16a","commits":[{"sha":"2c8fd268f41884bef5d37acda08d8006dc7da0ea","author":{"name":"Jia Zhang","email":"6b5d8e5527f9df6613259bf4896982fa76051db4@linux.alibaba.com"},"message":"module: Do not access sig_enforce directly\n\nCall is_module_sig_enforced() instead.\n\nSigned-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>\nSigned-off-by: Jessica Yu <jeyu@kernel.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/2c8fd268f41884bef5d37acda08d8006dc7da0ea"},{"sha":"c554b89868015d86cd330d9cc10656c3756352a5","author":{"name":"Jia Zhang","email":"6b5d8e5527f9df6613259bf4896982fa76051db4@linux.alibaba.com"},"message":"module: Allow to always show the status of modsign\n\nThe sig_enforce parameter could be always shown to reflect the current\nstatus of signature enforcement. For the case of\nCONFIG_MODULE_SIG_FORCE=y, this modification doesn't do anything, since\nsig_enforce can only be enabled, and not disabled, even via the kernel\ncmdline.\n\nSigned-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>\n[jeyu: reworded commit message to provide clarification]\nSigned-off-by: Jessica Yu <jeyu@kernel.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/c554b89868015d86cd330d9cc10656c3756352a5"},{"sha":"8f4d19aacb64f2b3d65c8cf7974c3d153224b5f2","author":{"name":"Gao Feng","email":"69545a04d4ba61a2fccae87aa2c6e3e0a450b8e4@vip.163.com"},"message":"netfilter: xt_CT: Reject the non-null terminated string from user space\n\nThe helper and timeout strings are from user-space, we need to make\nsure they are null terminated. If not, evil user could make kernel\nread the unexpected memory, even print it when fail to find by the\nfollowing codes.\n\npr_info_ratelimited(\"No such helper \\\"%s\\\"\\n\", helper_name);\n\nSigned-off-by: Gao Feng <gfree.wind@vip.163.com>\nAcked-by: Florian Westphal <fw@strlen.de>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/8f4d19aacb64f2b3d65c8cf7974c3d153224b5f2"},{"sha":"9c7f96fd77b0dbe1fe7ed1f9c462c45dc48a1076","author":{"name":"Alexey Kodanev","email":"230f550b09df4d04cb9a8036b198a530acf758d3@oracle.com"},"message":"netfilter: nf_tables: check msg_type before nft_trans_set(trans)\n\nThe patch moves the \"trans->msg_type == NFT_MSG_NEWSET\" check before\nusing nft_trans_set(trans). Otherwise we can get out of bounds read.\n\nFor example, KASAN reported the one when running 0001_cache_handling_0 nft\ntest. In this case \"trans->msg_type\" was NFT_MSG_NEWTABLE:\n\n[75517.177808] BUG: KASAN: slab-out-of-bounds in nft_set_lookup_global+0x22f/0x270 [nf_tables]\n[75517.279094] Read of size 8 at addr ffff881bdb643fc8 by task nft/7356\n...\n[75517.375605] CPU: 26 PID: 7356 Comm: nft Tainted: G  E   4.17.0-rc7.1.x86_64 #1\n[75517.489587] Hardware name: Oracle Corporation SUN SERVER X4-2\n[75517.618129] Call Trace:\n[75517.648821]  dump_stack+0xd1/0x13b\n[75517.691040]  ? show_regs_print_info+0x5/0x5\n[75517.742519]  ? kmsg_dump_rewind_nolock+0xf5/0xf5\n[75517.799300]  ? lock_acquire+0x143/0x310\n[75517.846738]  print_address_description+0x85/0x3a0\n[75517.904547]  kasan_report+0x18d/0x4b0\n[75517.949892]  ? nft_set_lookup_global+0x22f/0x270 [nf_tables]\n[75518.019153]  ? nft_set_lookup_global+0x22f/0x270 [nf_tables]\n[75518.088420]  ? nft_set_lookup_global+0x22f/0x270 [nf_tables]\n[75518.157689]  nft_set_lookup_global+0x22f/0x270 [nf_tables]\n[75518.224869]  nf_tables_newsetelem+0x1a5/0x5d0 [nf_tables]\n[75518.291024]  ? nft_add_set_elem+0x2280/0x2280 [nf_tables]\n[75518.357154]  ? nla_parse+0x1a5/0x300\n[75518.401455]  ? kasan_kmalloc+0xa6/0xd0\n[75518.447842]  nfnetlink_rcv+0xc43/0x1bdf [nfnetlink]\n[75518.507743]  ? nfnetlink_rcv+0x7a5/0x1bdf [nfnetlink]\n[75518.569745]  ? nfnl_err_reset+0x3c0/0x3c0 [nfnetlink]\n[75518.631711]  ? lock_acquire+0x143/0x310\n[75518.679133]  ? netlink_deliver_tap+0x9b/0x1070\n[75518.733840]  ? kasan_unpoison_shadow+0x31/0x40\n[75518.788542]  netlink_unicast+0x45d/0x680\n[75518.837111]  ? __isolate_free_page+0x890/0x890\n[75518.891913]  ? netlink_attachskb+0x6b0/0x6b0\n[75518.944542]  netlink_sendmsg+0x6fa/0xd30\n[75518.993107]  ? netlink_unicast+0x680/0x680\n[75519.043758]  ? netlink_unicast+0x680/0x680\n[75519.094402]  sock_sendmsg+0xd9/0x160\n[75519.138810]  ___sys_sendmsg+0x64d/0x980\n[75519.186234]  ? copy_msghdr_from_user+0x350/0x350\n[75519.243118]  ? lock_downgrade+0x650/0x650\n[75519.292738]  ? do_raw_spin_unlock+0x5d/0x250\n[75519.345456]  ? _raw_spin_unlock+0x24/0x30\n[75519.395065]  ? __handle_mm_fault+0xbde/0x3410\n[75519.448830]  ? sock_setsockopt+0x3d2/0x1940\n[75519.500516]  ? __lock_acquire.isra.25+0xdc/0x19d0\n[75519.558448]  ? lock_downgrade+0x650/0x650\n[75519.608057]  ? __audit_syscall_entry+0x317/0x720\n[75519.664960]  ? __fget_light+0x58/0x250\n[75519.711325]  ? __sys_sendmsg+0xde/0x170\n[75519.758850]  __sys_sendmsg+0xde/0x170\n[75519.804193]  ? __ia32_sys_shutdown+0x90/0x90\n[75519.856725]  ? syscall_trace_enter+0x897/0x10e0\n[75519.912354]  ? trace_event_raw_event_sys_enter+0x920/0x920\n[75519.979432]  ? __audit_syscall_entry+0x720/0x720\n[75520.036118]  do_syscall_64+0xa3/0x3d0\n[75520.081248]  ? prepare_exit_to_usermode+0x47/0x1d0\n[75520.139904]  entry_SYSCALL_64_after_hwframe+0x44/0xa9\n[75520.201680] RIP: 0033:0x7fc153320ba0\n[75520.245772] RSP: 002b:00007ffe294c3638 EFLAGS: 00000246 ORIG_RAX: 000000000000002e\n[75520.337708] RAX: ffffffffffffffda RBX: 00007ffe294c4820 RCX: 00007fc153320ba0\n[75520.424547] RDX: 0000000000000000 RSI: 00007ffe294c46b0 RDI: 0000000000000003\n[75520.511386] RBP: 00007ffe294c47b0 R08: 0000000000000004 R09: 0000000002114090\n[75520.598225] R10: 00007ffe294c30a0 R11: 0000000000000246 R12: 00007ffe294c3660\n[75520.684961] R13: 0000000000000001 R14: 00007ffe294c3650 R15: 0000000000000001\n\n[75520.790946] Allocated by task 7356:\n[75520.833994]  kasan_kmalloc+0xa6/0xd0\n[75520.878088]  __kmalloc+0x189/0x450\n[75520.920107]  nft_trans_alloc_gfp+0x20/0x190 [nf_tables]\n[75520.983961]  nf_tables_newtable+0xcd0/0x1bd0 [nf_tables]\n[75521.048857]  nfnetlink_rcv+0xc43/0x1bdf [nfnetlink]\n[75521.108655]  netlink_unicast+0x45d/0x680\n[75521.157013]  netlink_sendmsg+0x6fa/0xd30\n[75521.205271]  sock_sendmsg+0xd9/0x160\n[75521.249365]  ___sys_sendmsg+0x64d/0x980\n[75521.296686]  __sys_sendmsg+0xde/0x170\n[75521.341822]  do_syscall_64+0xa3/0x3d0\n[75521.386957]  entry_SYSCALL_64_after_hwframe+0x44/0xa9\n\n[75521.467867] Freed by task 23454:\n[75521.507804]  __kasan_slab_free+0x132/0x180\n[75521.558137]  kfree+0x14d/0x4d0\n[75521.596005]  free_rt_sched_group+0x153/0x280\n[75521.648410]  sched_autogroup_create_attach+0x19a/0x520\n[75521.711330]  ksys_setsid+0x2ba/0x400\n[75521.755529]  __ia32_sys_setsid+0xa/0x10\n[75521.802850]  do_syscall_64+0xa3/0x3d0\n[75521.848090]  entry_SYSCALL_64_after_hwframe+0x44/0xa9\n\n[75521.929000] The buggy address belongs to the object at ffff881bdb643f80\n which belongs to the cache kmalloc-96 of size 96\n[75522.079797] The buggy address is located 72 bytes inside of\n 96-byte region [ffff881bdb643f80, ffff881bdb643fe0)\n[75522.221234] The buggy address belongs to the page:\n[75522.280100] page:ffffea006f6d90c0 count:1 mapcount:0 mapping:0000000000000000 index:0x0\n[75522.377443] flags: 0x2fffff80000100(slab)\n[75522.426956] raw: 002fffff80000100 0000000000000000 0000000000000000 0000000180200020\n[75522.521275] raw: ffffea006e6fafc0 0000000c0000000c ffff881bf180f400 0000000000000000\n[75522.615601] page dumped because: kasan: bad access detected\n\nFixes: 37a9cc525525 (\"netfilter: nf_tables: add generation mask to sets\")\nSigned-off-by: Alexey Kodanev <alexey.kodanev@oracle.com>\nAcked-by: Florian Westphal <fw@strlen.de>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/9c7f96fd77b0dbe1fe7ed1f9c462c45dc48a1076"},{"sha":"31875d4970baa02e08b719fdfea6f43e9e2f7e77","author":{"name":"Julian Anastasov","email":"84572ef2253ef81e2d8cd8c65849f4d9a3881f47@ssi.bg"},"message":"ipvs: register conntrack hooks for ftp\n\nip_vs_ftp requires conntrack modules for mangling\nof FTP command responses in passive mode.\n\nMake sure the conntrack hooks are registered when\nreal servers use NAT method in FTP virtual service.\nThe hooks will be registered while the service is\npresent.\n\nFixes: 0c66dc1ea3f0 (\"netfilter: conntrack: register hooks in netns when needed by ruleset\")\nSigned-off-by: Julian Anastasov <ja@ssi.bg>\nAcked-by: Simon Horman <horms+renesas@verge.net.au>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/31875d4970baa02e08b719fdfea6f43e9e2f7e77"},{"sha":"0cafa3926f0d8d72a2a814843f4db8cfef66d4ce","author":{"name":"Taehee Yoo","email":"6de65b15142147918004ed846c7e65326f9b9238@gmail.com"},"message":"netfilter: nft_reject_bridge: fix skb allocation size in nft_reject_br_send_v6_unreach\n\nIn order to allocate icmpv6 skb, sizeof(struct ipv6hdr) should be used.\n\nSigned-off-by: Taehee Yoo <ap420073@gmail.com>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/0cafa3926f0d8d72a2a814843f4db8cfef66d4ce"},{"sha":"6fcc02e3c2bddeaf628fde3c6a5ab3216d45691a","author":{"name":"Julian Anastasov","email":"84572ef2253ef81e2d8cd8c65849f4d9a3881f47@ssi.bg"},"message":"ipvs: fix check on xmit to non-local addresses\n\nThere is mistake in the rt_mode_allow_non_local assignment.\nIt should be used to check if sending to non-local addresses is\nallowed, now it checks if local addresses are allowed.\n\nAs local addresses are allowed for most of the cases, the only\nplaces that are affected are for traffic to transparent cache\nservers:\n\n- bypass connections when cache server is not available\n- related ICMP in FORWARD hook when sent to cache server\n\nFixes: 4a4739d56b00 (\"ipvs: Pull out crosses_local_route_boundary logic\")\nSigned-off-by: Julian Anastasov <ja@ssi.bg>\nAcked-by: Simon Horman <horms@verge.net.au>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/6fcc02e3c2bddeaf628fde3c6a5ab3216d45691a"},{"sha":"9e8c8dabb78e886ace989729e763d28c76f5169e","author":{"name":"Alin Nastac","email":"56d27f99cd9ef04920c9cdb7d72ba6d730115acd@gmail.com"},"message":"netfilter: ebtables: fix compat entry padding\n\nOn arm64, ebt_entry_{match,watcher,target} structs are 40 bytes long\nwhile on 32-bit arm these structs have a size of 36 bytes.\n\nCOMPAT_XT_ALIGN() macro cannot be used here to determine the necessary\npadding for the CONFIG_COMPAT because it imposes an 8-byte boundary\nalignment, condition that is not found in 32-bit ebtables application.\n\nSigned-off-by: Alin Nastac <alin.nastac@gmail.com>\nAcked-by: Florian Westphal <fw@strlen.de>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/9e8c8dabb78e886ace989729e763d28c76f5169e"},{"sha":"9dcceb1378b6d66633f613805b2d5a22af4d5383","author":{"name":"Serhey Popovych","email":"b63fd7ba42f829eee52c4866e6a6e229b316fd8d@gmail.com"},"message":"netfilter: xt_set: Check hook mask correctly\n\nInserting rule before one with SET target we get error with warning in\ndmesg(1) output:\n\n  # iptables -A FORWARD -t mangle -j SET --map-set test src --map-prio\n  # iptables -I FORWARD 1 -t mangle -j ACCEPT\n  iptables: Invalid argument. Run `dmesg' for more information.\n  # dmesg |tail -n1\n  [268578.026643] mapping of prio or/and queue is allowed only from \\\n  OUTPUT/FORWARD/POSTROUTING chains\n\nRather than checking for supported hook bits for SET target check for\nunsupported one as done in all rest of matches and targets.\n\nSigned-off-by: Serhey Popovych <serhe.popovych@gmail.com>\nSigned-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/9dcceb1378b6d66633f613805b2d5a22af4d5383"},{"sha":"bd975e691486ba52790ba23cc9b4fecab7bc0d31","author":{"name":"Jozsef Kadlecsik","email":"5a7b97a838c5f3992292d1fd9e7ad830cc55ada6@blackhole.kfki.hu"},"message":"netfilter: ipset: List timing out entries with \"timeout 1\" instead of zero\n\nWhen listing sets with timeout support, there's a probability that\njust timing out entries with \"0\" timeout value is listed/saved.\nHowever when restoring the saved list, the zero timeout value means\npermanent elelements.\n\nThe new behaviour is that timing out entries are listed with \"timeout 1\"\ninstead of zero.\n\nFixes netfilter bugzilla #1258.\n\nSigned-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/bd975e691486ba52790ba23cc9b4fecab7bc0d31"},{"sha":"30a2e107108c66cbcb7776b58cbcd7db223a1cc9","author":{"name":"Jozsef Kadlecsik","email":"5a7b97a838c5f3992292d1fd9e7ad830cc55ada6@blackhole.kfki.hu"},"message":"netfilter: ipset: Limit max timeout value\n\nDue to the negative value condition in msecs_to_jiffies(), the real\nmax possible timeout value must be set to (UINT_MAX >> 1)/MSEC_PER_SEC.\n\nNeutron Soutmun proposed the proper fix, but an insufficient one was\napplied, see https://patchwork.ozlabs.org/patch/400405/.\n\nSigned-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/30a2e107108c66cbcb7776b58cbcd7db223a1cc9"},{"sha":"cbdebe481a14b42c45aa9f4ceb5ff19b55de2c57","author":{"name":"Florent Fourcot","email":"787ae617617698b2b89c353cdfb3f2e4d16ffeb7@wifirst.fr"},"message":"netfilter: ipset: forbid family for hash:mac sets\n\nUserspace `ipset` command forbids family option for hash:mac type:\n\nipset create test hash:mac family inet4\nipset v6.30: Unknown argument: `family'\n\nHowever, this check is not done in kernel itself. When someone use\nexternal netlink applications (pyroute2 python library for example), one\ncan create hash:mac with invalid family and inconsistant results from\nuserspace (`ipset` command cannot read set content anymore).\n\nThis patch enforce the logic in kernel, and forbids insertion of\nhash:mac with a family set.\n\nSince IP_SET_PROTO_UNDEF is defined only for hash:mac, this patch has no\nimpact on other hash:* sets\n\nSigned-off-by: Florent Fourcot <florent.fourcot@wifirst.fr>\nSigned-off-by: Victorien Molle <victorien.molle@wifirst.fr>\nSigned-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/cbdebe481a14b42c45aa9f4ceb5ff19b55de2c57"},{"sha":"11ff7288beb2b7da889a014aff0a7b80bf8efcf3","author":{"name":"Florian Westphal","email":"cef439e78636cdab99cd2923826c5065a0743e5b@strlen.de"},"message":"netfilter: ebtables: reject non-bridge targets\n\nthe ebtables evaluation loop expects targets to return\npositive values (jumps), or negative values (absolute verdicts).\n\nThis is completely different from what xtables does.\nIn xtables, targets are expected to return the standard netfilter\nverdicts, i.e. NF_DROP, NF_ACCEPT, etc.\n\nebtables will consider these as jumps.\n\nTherefore reject any target found due to unspec fallback.\nv2: also reject watchers.  ebtables ignores their return value, so\na target that assumes skb ownership (and returns NF_STOLEN) causes\nuse-after-free.\n\nThe only watchers in the 'ebtables' front-end are log and nflog;\nboth have AF_BRIDGE specific wrappers on kernel side.\n\nReported-by: syzbot+2b43f681169a2a0d306a@syzkaller.appspotmail.com\nSigned-off-by: Florian Westphal <fw@strlen.de>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/11ff7288beb2b7da889a014aff0a7b80bf8efcf3"},{"sha":"5b94b2bec85f14d3c16d4edb698eae5ca8c3d7a0","author":{"name":"Pablo Neira Ayuso","email":"707d14912bb250caf67dfe0ea4035681fbfc4f56@netfilter.org"},"message":"Merge git://blackhole.kfki.hu/nf\n\nJozsef Kadlecsik says:\n\n====================\nipset patches for nf\n\n- Check hook mask for unsupported hooks instead of supported ones in xt_set.\n  (Serhey Popovych).\n\n- List/save just timing out entries with \"timeout 1\" instead of \"timeout 0\":\n  zero timeout value means permanent entries. When restoring the elements,\n  we'd add non-timing out entries. Fixes netfilter bugzilla id #1258.\n\n- Limit max timeout value to (UINT_MAX >> 1)/MSEC_PER_SEC due to the\n  negative value condition in msecs_to_jiffies(). msecs_to_jiffies()\n  should be revised: if one wants to set the timeout above 2147483,\n  msecs_to_jiffies() sets the value to 4294967. (Reported by Maxim Masiutin).\n\n- Forbid family for hash:mac sets in the kernel module: ipset userspace tool\n  enforces it but third party tools could create sets with this parameter.\n  Such sets then cannot be listed/saved with ipset itself. (Florent Fourcot)\n====================\n\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/5b94b2bec85f14d3c16d4edb698eae5ca8c3d7a0"},{"sha":"82e20b44477ffe90a5866caa209ecc9df818c6a1","author":{"name":"Taehee Yoo","email":"6de65b15142147918004ed846c7e65326f9b9238@gmail.com"},"message":"netfilter: nft_set_rbtree: fix parameter of __nft_rbtree_lookup()\n\nThe parameter this doesn't have a flags value. so that it can't be\nused by nft_rbtree_interval_end().\n\ntest commands:\n   %nft add table ip filter\n   %nft add set ip filter s { type ipv4_addr \\; flags interval \\; }\n   %nft add element ip filter s {0-1}\n   %nft add element ip filter s {2-10}\n   %nft add chain ip filter input { type filter hook input priority 0\\; }\n   %nft add rule ip filter input ip saddr @s\n\nSplat looks like:\n[  246.752502] BUG: KASAN: slab-out-of-bounds in __nft_rbtree_lookup+0x677/0x6a0 [nft_set_rbtree]\n[  246.752502] Read of size 1 at addr ffff88010d9efa47 by task http/1092\n\n[  246.752502] CPU: 1 PID: 1092 Comm: http Not tainted 4.17.0-rc6+ #185\n[  246.752502] Call Trace:\n[  246.752502]  <IRQ>\n[  246.752502]  dump_stack+0x74/0xbb\n[  246.752502]  ? __nft_rbtree_lookup+0x677/0x6a0 [nft_set_rbtree]\n[  246.752502]  print_address_description+0xc7/0x290\n[  246.752502]  ? __nft_rbtree_lookup+0x677/0x6a0 [nft_set_rbtree]\n[  246.752502]  kasan_report+0x22c/0x350\n[  246.752502]  __nft_rbtree_lookup+0x677/0x6a0 [nft_set_rbtree]\n[  246.752502]  nft_rbtree_lookup+0xc9/0x2d2 [nft_set_rbtree]\n[  246.752502]  ? sched_clock_cpu+0x144/0x180\n[  246.752502]  nft_lookup_eval+0x149/0x3a0 [nf_tables]\n[  246.752502]  ? __lock_acquire+0xcea/0x4ed0\n[  246.752502]  ? nft_lookup_init+0x6b0/0x6b0 [nf_tables]\n[  246.752502]  nft_do_chain+0x263/0xf50 [nf_tables]\n[  246.752502]  ? __nft_trace_packet+0x1a0/0x1a0 [nf_tables]\n[  246.752502]  ? sched_clock_cpu+0x144/0x180\n[ ... ]\n\nFixes: f9121355eb6f (\"netfilter: nft_set_rbtree: incorrect assumption on lower interval lookups\")\nSigned-off-by: Taehee Yoo <ap420073@gmail.com>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/82e20b44477ffe90a5866caa209ecc9df818c6a1"},{"sha":"64e6dd1fb2f1ed799f317dc34aa6e251c64f4981","author":{"name":"Gao Feng","email":"69545a04d4ba61a2fccae87aa2c6e3e0a450b8e4@vip.163.com"},"message":"netfilter: nf_conntrack: Increase __IPS_MAX_BIT with new bit IPS_OFFLOAD_BIT\n\nThe __IPS_MAX_BIT is used in __ctnetlink_change_status as the max bit\nvalue. When add new bit IPS_OFFLOAD_BIT whose value is 14, we should\nincrease the __IPS_MAX_BIT too, from 14 to 15.\n\nThere is no any bug in current codes, although it lost one loop in\n__ctnetlink_change_status. Because the new bit IPS_OFFLOAD_BIT belongs\nthe IPS_UNCHANGEABLE_MASK.\n\nSigned-off-by: Gao Feng <gfree.wind@vip.163.com>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/64e6dd1fb2f1ed799f317dc34aa6e251c64f4981"},{"sha":"c568503ef02030f169c9e19204def610a3510918","author":{"name":"Florian Westphal","email":"cef439e78636cdab99cd2923826c5065a0743e5b@strlen.de"},"message":"netfilter: x_tables: initialise match/target check parameter struct\n\nsyzbot reports following splat:\n\nBUG: KMSAN: uninit-value in ebt_stp_mt_check+0x24b/0x450\n net/bridge/netfilter/ebt_stp.c:162\n ebt_stp_mt_check+0x24b/0x450 net/bridge/netfilter/ebt_stp.c:162\n xt_check_match+0x1438/0x1650 net/netfilter/x_tables.c:506\n ebt_check_match net/bridge/netfilter/ebtables.c:372 [inline]\n ebt_check_entry net/bridge/netfilter/ebtables.c:702 [inline]\n\nThe uninitialised access is\n   xt_mtchk_param->nft_compat\n\n... which should be set to 0.\nFix it by zeroing the struct beforehand, same for tgchk.\n\nip(6)tables targetinfo uses c99-style initialiser, so no change\nneeded there.\n\nReported-by: syzbot+da4494182233c23a5fcf@syzkaller.appspotmail.com\nFixes: 55917a21d0cc0 (\"netfilter: x_tables: add context to know if extension runs from nft_compat\")\nSigned-off-by: Florian Westphal <fw@strlen.de>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/c568503ef02030f169c9e19204def610a3510918"},{"sha":"d8e87fc6d11c31525430a388317b52f4a98a5328","author":{"name":"Corentin Labbe","email":"16a2fc074d33dba14e47b55c74beb641d5160cd9@baylibre.com"},"message":"netfilter: remove include/net/netfilter/nft_dup.h\n\ninclude/net/netfilter/nft_dup.h was introduced in d877f07112f1 (\"netfilter: nf_tables: add nft_dup expression\")\nbut was never user since this date.\n\nFurthermore, the only struct in this file is unused elsewhere.\n\nSigned-off-by: Corentin Labbe <clabbe@baylibre.com>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/d8e87fc6d11c31525430a388317b52f4a98a5328"},{"sha":"b16558579576c8f2781062b638600f68954b1827","author":{"name":"Daniel Borkmann","email":"3d0f3b9ddcacec30c4008c5e030e6c13a478cb4f@iogearbox.net"},"message":"bpf: implement dummy fops for bpf objects\n\nsyzkaller was able to trigger the following warning in\ndo_dentry_open():\n\n  WARNING: CPU: 1 PID: 4508 at fs/open.c:778 do_dentry_open+0x4ad/0xe40 fs/open.c:778\n  Kernel panic - not syncing: panic_on_warn set ...\n\n  CPU: 1 PID: 4508 Comm: syz-executor867 Not tainted 4.17.0+ #90\n  Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\n  Call Trace:\n  [...]\n   vfs_open+0x139/0x230 fs/open.c:908\n   do_last fs/namei.c:3370 [inline]\n   path_openat+0x1717/0x4dc0 fs/namei.c:3511\n   do_filp_open+0x249/0x350 fs/namei.c:3545\n   do_sys_open+0x56f/0x740 fs/open.c:1101\n   __do_sys_openat fs/open.c:1128 [inline]\n   __se_sys_openat fs/open.c:1122 [inline]\n   __x64_sys_openat+0x9d/0x100 fs/open.c:1122\n   do_syscall_64+0x1b1/0x800 arch/x86/entry/common.c:287\n   entry_SYSCALL_64_after_hwframe+0x49/0xbe\n\nProblem was that prog and map inodes in bpf fs did not\nimplement a dummy file open operation that would return an\nerror. The patch in do_dentry_open() checks whether f_ops\nare present and if not bails out with an error. While this\nmay be fine, we really shouldn't be throwing a warning\nthough. Thus follow the model similar to bad_file_ops and\nreject the request unconditionally with -EIO.\n\nFixes: b2197755b263 (\"bpf: add support for persistent maps/progs\")\nReported-by: syzbot+2e7fcab0f56fdbb330b8@syzkaller.appspotmail.com\nSigned-off-by: Daniel Borkmann <daniel@iogearbox.net>\nSigned-off-by: Alexei Starovoitov <ast@kernel.org>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/b16558579576c8f2781062b638600f68954b1827"},{"sha":"1c9ca7e9836a4df1518568ea47461c5ef7c2cf8b","author":{"name":"Anders Roxell","email":"b4e8e89057bc64bc4f9625a4a821c9ac177a7ed2@linaro.org"},"message":"selftests: bpf: fix urandom_read build issue\n\ngcc complains that urandom_read gets built twice.\n\ngcc -o tools/testing/selftests/bpf/urandom_read\n-static urandom_read.c -Wl,--build-id\ngcc -Wall -O2 -I../../../include/uapi -I../../../lib -I../../../lib/bpf\n-I../../../../include/generated  -I../../../include    urandom_read.c\nurandom_read -lcap -lelf -lrt -lpthread -o\ntools/testing/selftests/bpf/urandom_read\ngcc: fatal error: input file\n‘tools/testing/selftests/bpf/urandom_read’ is the\nsame as output file\ncompilation terminated.\n../lib.mk:110: recipe for target\n'tools/testing/selftests/bpf/urandom_read' failed\nTo fix this issue remove the urandom_read target and so target\nTEST_CUSTOM_PROGS gets used.\n\nFixes: 81f77fd0deeb (\"bpf: add selftest for stackmap with BPF_F_STACK_BUILD_ID\")\nSigned-off-by: Anders Roxell <anders.roxell@linaro.org>\nAcked-by: Yonghong Song <yhs@fb.com>\nSigned-off-by: Daniel Borkmann <daniel@iogearbox.net>","distinct":true,"url":"https://api.github.com/repos/kraj/linux/commits/1c9ca7e9836a4df1518568ea47461c5ef7c2cf8b"}]}
{"actor":{"display_login":"kraj"}}