Hi,
On Wed, Jul 05, 2023 at 05:00:00PM +0200, Pablo Neira Ayuso wrote:
Hi Greg, Sasha,
[ This is v2 appends patch #11 f838e0906dd3 as Florian suggested. ]
^^^^^^^^^^^^ this should be 2024439bd5ce instead
The following list shows the backported patches, I am using original commit IDs for reference:
0854db2aaef3 ("netfilter: nf_tables: use net_generic infra for transaction data")
81ea01066741 ("netfilter: nf_tables: add rescheduling points during loop detection walks")
1240eb93f061 ("netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE")
4bedf9eee016 ("netfilter: nf_tables: fix chain binding transaction logic")
26b5a5712eb8 ("netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain")
938154b93be8 ("netfilter: nf_tables: reject unbound anonymous set before commit phase")
62e1e94b246e ("netfilter: nf_tables: reject unbound chain set before commit phase")
f8bb7889af58 ("netfilter: nftables: rename set element data activation/deactivation functions")
628bd3e49cba ("netfilter: nf_tables: drop map element references from preparation phase")
3e70489721b6 ("netfilter: nf_tables: unbind non-anonymous set if rule construction fails")
f838e0906dd3 ("netfilter: nf_tables: fix scheduling-while-atomic splat")
Nitpick, incorrect original commit in this cover letter patch #11:
11) 2024439bd5ce ("netfilter: nf_tables: fix scheduling-while-atomic splat")
Backport of patch #11 already points to the valid original commit.
Note:
- Patch #1 is a backported dependency patch required by these fixes.
- Patch #2 needs a follow up fix coming in this series as patch #11.
Please, apply, Thanks.
Florian Westphal (3): netfilter: nf_tables: use net_generic infra for transaction data netfilter: nf_tables: add rescheduling points during loop detection walks netfilter: nf_tables: fix scheduling-while-atomic splat
Pablo Neira Ayuso (8): netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE netfilter: nf_tables: fix chain binding transaction logic netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain netfilter: nf_tables: reject unbound anonymous set before commit phase netfilter: nf_tables: reject unbound chain set before commit phase netfilter: nftables: rename set element data activation/deactivation functions netfilter: nf_tables: drop map element references from preparation phase netfilter: nf_tables: unbind non-anonymous set if rule construction fails
include/net/netfilter/nf_tables.h | 41 +- include/net/netns/nftables.h | 7 - net/netfilter/nf_tables_api.c | 692 +++++++++++++++++++++--------- net/netfilter/nf_tables_offload.c | 30 +- net/netfilter/nft_chain_filter.c | 11 +- net/netfilter/nft_dynset.c | 6 +- net/netfilter/nft_immediate.c | 90 +++- net/netfilter/nft_set_bitmap.c | 5 +- net/netfilter/nft_set_hash.c | 23 +- net/netfilter/nft_set_pipapo.c | 14 +- net/netfilter/nft_set_rbtree.c | 5 +- 11 files changed, 678 insertions(+), 246 deletions(-)
-- 2.30.2