Messages in this thread | | | Date | Fri, 28 Aug 2020 18:45:51 +0200 | From | Florian Westphal <> | Subject | Re: [PATCH v3 1/1] netfilter: nat: add a range check for l3/l4 protonum |
| |
Pablo Neira Ayuso <pablo@netfilter.org> wrote: > Hi Will, > > Given this is for -stable maintainers only, I'd suggest: > > 1) Specify what -stable kernel versions this patch applies to. > Explain that this problem is gone since what kernel version. > > 2) Maybe clarify that this is only for stable in the patch subject, > e.g. [PATCH -stable v3] netfilter: nat: add a range check for l3/l4
Hmm, we silently accept a tuple that we can't really deal with, no?
> > + if (l3num != NFPROTO_IPV4 && l3num != NFPROTO_IPV6) > > + return -EOPNOTSUPP;
I vote to apply this to nf.git
| |