Received: by 2002:a25:4158:0:0:0:0:0 with SMTP id o85csp7331297yba; Thu, 2 May 2019 08:09:17 -0700 (PDT) X-Google-Smtp-Source: APXvYqzwVH+6/VLiCZ7UdJ2FAvEnRRaoGYtc7TIl3GWlYalFSs3QNEbXzdaypI0N70FLvZzFV8YW X-Received: by 2002:a17:902:3064:: with SMTP id u91mr4351279plb.181.1556809757865; Thu, 02 May 2019 08:09:17 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1556809757; cv=none; d=google.com; s=arc-20160816; b=BpgF/R/U8QkrEuSbIXwKlvtkgDyRaLcXzd9G62UAWLPFKRJ5OKYH5ejjHdm+6C4J8c +05w+p4vdgPT8+4EuFgE1UXczmZs1lm4ZnM/oS6SbukrBplnwiWzQOKVEiC/oHmc2IUR 0JLv6z0gk6ftwnXPasbIb6e3ukMgyVok/bm7Z936rlhlB0vblQo3nv5zonlRHvH6Gu2k Dpslq6C9oOCpOMsLyU0CD08dXm2deX+OsySwrf6xlqzG4Vj5esNAhpjHlEXCxTyBrf8J tOEJw/r0T+9C7RVujzH2qUr9EVaFU3jpf5q1vbFD5uOHUZVJ4M4YVqN53D3pdFbwaXqk lpoQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:content-transfer-encoding:mime-version :references:in-reply-to:date:cc:to:from:subject:message-id; bh=KkIy93S3ksMqXY0R7ZKcgPmtkYmVmZMWtnl8cUSBkdk=; b=eVqIK4pF+o1MgC+uTaF0eaROvfv+W7JmdQuKOF/GXyRMXb6l0IiD5Z4yi8GJh3dl1N J+sfsDMmhI0VCD7u4B1dSXEMfIbwcPMYbgjiluWNMJEZtt446lBiNJkIBKBz8HNiQ3JL +Cf8PlwtdZWwxS0lnsw/tktkBVLAotAOJSapulTceKArEyRTD9mWmIOFCehe955QBoXr PFwYFDHscoK5CkGlTJmW8pfL9eiJ6Hp8/+PMGuBW39PrZJnYeKDw/VojtbAy01/S2M6T qwoNcVKzDjRcRAaFcRLR1uSegE+v7PyqBVH1Cbx+oaaa96JflWWvY8GgQAbxWt/Noh5K S3Ng== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id m3si589094pld.29.2019.05.02.08.08.56; Thu, 02 May 2019 08:09:17 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726369AbfEBPHz (ORCPT + 99 others); Thu, 2 May 2019 11:07:55 -0400 Received: from s3.sipsolutions.net ([144.76.43.62]:58650 "EHLO sipsolutions.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726197AbfEBPHy (ORCPT ); Thu, 2 May 2019 11:07:54 -0400 Received: by sipsolutions.net with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1hMDJO-0006PH-Ow; Thu, 02 May 2019 17:07:50 +0200 Message-ID: <3c683fc0d3ea3d07034366a5fbbd5ed5049d48b9.camel@sipsolutions.net> Subject: Re: [PATCH net-next 3/3] netlink: add validation of NLA_F_NESTED flag From: Johannes Berg To: Michal Kubecek Cc: "David S. Miller" , "netdev@vger.kernel.org" , David Ahern , "linux-kernel@vger.kernel.org" Date: Thu, 02 May 2019 17:07:49 +0200 In-Reply-To: <20190502131416.GE21672@unicorn.suse.cz> References: <75a0887b3eb70005c272685d8ef9a712f37d7a54.1556798793.git.mkubecek@suse.cz> <3e8291cb2491e9a1830afdb903ed2c52e9f7475c.camel@sipsolutions.net> <20190502131416.GE21672@unicorn.suse.cz> Content-Type: text/plain; charset="UTF-8" X-Mailer: Evolution 3.28.5 (3.28.5-2.fc28) Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Thu, 2019-05-02 at 15:14 +0200, Michal Kubecek wrote: > > > > @@ -415,7 +418,8 @@ enum netlink_validation { > > > #define NL_VALIDATE_STRICT (NL_VALIDATE_TRAILING |\ > > > NL_VALIDATE_MAXTYPE |\ > > > NL_VALIDATE_UNSPEC |\ > > > - NL_VALIDATE_STRICT_ATTRS) > > > + NL_VALIDATE_STRICT_ATTRS |\ > > > + NL_VALIDATE_NESTED) > > > > This is fine _right now_, but in general we cannot keep adding here > > after the next release :-) > > Right, that's why I would like to get this into the same cycle as your > series. Yeah, I know you know, just wanted state it again :-) > How about "NLA_F_NESTED is missing" and "NLA_F_NESTED not expected"? Looks good to me. johannes