Received: by 2002:a05:6a10:a0d1:0:0:0:0 with SMTP id j17csp2386976pxa; Mon, 24 Aug 2020 12:41:57 -0700 (PDT) X-Google-Smtp-Source: ABdhPJz2oSR4TqSI+tc6om5hqDfuiTz9eGfC4CWlIDmKniHnCKu3NLTUuihqmPpMJUxPR4uJEiGS X-Received: by 2002:a17:906:43c9:: with SMTP id j9mr6939884ejn.542.1598298117223; Mon, 24 Aug 2020 12:41:57 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1598298117; cv=none; d=google.com; s=arc-20160816; b=XPERQxgt73ciFP7/H8cxJ9D4KxtXxoDIBS4677SZcA+ilkPmnRBHFCKkdx/lR753mf w5KqWE7Aj3u32zZ9Rl5EV/tAVIQjBfyz53cpaT31qpHmtjG8Y4Jf9e6SK06Ktvke6EDs ACfeuyDXrEgA1cShkIlFHvNQY+y1tXAZrxV5tlBJE9cxtIHtNWPvNP/ZBgOA1RvL3mGf /HK8Fd6r+NRcmd70kCY1MmOjtO/2qFZCnMBhZOeDvWuW0ikpvugHw2QLo26W7UJApNPp dP+G7ui7DS/qfXnYbDfTX3Daz9V00BjuLIOeB9T5Ptt7ef7qSuFZECb1Ghwyr/hFG5rr GOWw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:cc:to:from:subject:references :mime-version:message-id:in-reply-to:date:dkim-signature; bh=+KNWHt39BeaES4QJyf9uwQ75hxAZKSv16U3yHjZ94QQ=; b=ng9fkGQBHixkNnBABHEYY5wnC1chiXq5P7bOehvS1+oqf4ju0E1f64qyYZ/9Ea4H3l RSRgxF9bFG+9TcusqFwpWRkM8N6bkmaGT5nltRb/QXaRAfO1VV8vQzHXkBncdNzTFO7S IXcExWN60+uZVN768WSxNXxr7il9Zo4B8g2RFEHJ3V9TWFukCSTyR31BVyjQOoyPH9Qg NTXDyq29/dNEKRk1yTUJ5V/bbRoxeR+Q+L6FaoA68jMao3MXj4lFlPUzVtBO5Xj50oh5 GcaSiC/OeIjXhCwr2SgejP3TAF7Pxh7UfeMBUjyNM+lBNDSg52Y9BcSoRYm/IqvyTwfq u9pw== ARC-Authentication-Results: i=1; mx.google.com; dkim=fail header.i=@google.com header.s=20161025 header.b="ts/mtuAS"; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=REJECT sp=REJECT dis=QUARANTINE) header.from=google.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id z13si7094711ejc.304.2020.08.24.12.41.33; Mon, 24 Aug 2020 12:41:57 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=fail header.i=@google.com header.s=20161025 header.b="ts/mtuAS"; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=REJECT sp=REJECT dis=QUARANTINE) header.from=google.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726090AbgHXTix (ORCPT + 99 others); Mon, 24 Aug 2020 15:38:53 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:54052 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726051AbgHXTiw (ORCPT ); Mon, 24 Aug 2020 15:38:52 -0400 Received: from mail-yb1-xb49.google.com (mail-yb1-xb49.google.com [IPv6:2607:f8b0:4864:20::b49]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id D319AC061573 for ; Mon, 24 Aug 2020 12:38:51 -0700 (PDT) Received: by mail-yb1-xb49.google.com with SMTP id y9so11786177ybp.8 for ; Mon, 24 Aug 2020 12:38:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=sender:date:in-reply-to:message-id:mime-version:references:subject :from:to:cc; bh=+KNWHt39BeaES4QJyf9uwQ75hxAZKSv16U3yHjZ94QQ=; b=ts/mtuAS4Phe5b60Tpb1gUcpi29I2K7oDx3gEEnmURzdhuDVWCXjJ0h7YWE967bLO/ Hkfb+Ki7yjB9Bvm3hYWb4zAG9oiE0Mg9LZyvwG0TU0zSQ60meMrjmDtsiuXadgoVMh5G JVf2M1EdFf5Hp6unvbJjKAjaAclEwkL/gEPN7yzmzdxeDZ30IOWw+EpbwfLCaxXW/ADB T/iUjvbkeI3GgS7/kLogGtm1gc8T4XOxxiCTxk+dYekA8li4PsJrHC1JHfXDQIbwu/aK UpiZGUyubukLJOSYl+hf+DaNlbXRHuj/pFIJmPR1qhnYiMus3wFswSmi94r8S6FvHSQA Milg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:sender:date:in-reply-to:message-id:mime-version :references:subject:from:to:cc; bh=+KNWHt39BeaES4QJyf9uwQ75hxAZKSv16U3yHjZ94QQ=; b=IAZsLdAh71SX0AgRxt9J0i5bouc+mBbUvGUFIEoyIkSE3U+Y6dK8VZAzHs/qm4063J zB9kbvJpUbdMDmJ1MCvEdyj37ScRvS4NBzZGx0cITNzkRrHAPtMnd8UuiULIxN5NQwP/ gTu7Xk2DGIIexhzIxc+FkmMgEwrKV42Ns2wuRBRrYWevf2KsXW+xOczeOEaOI0s0Crjd Xm/6uCvAQnPvb4TjAUHdPhFysCNyDQaf/pCUNeRmzW2eMzZGw4UqUUo9tz4BBk+ofA+e 1P8zu9d6bpBFI7L3H3GFQUEpA8dmtPCIjN96sgWX6Q+PsUQp00NpF0+BNHcj5OMONc+a tAWQ== X-Gm-Message-State: AOAM531dPDa90VytGxUk0VfkBkNnnEEIby/CoHva8Ae2z8+S+EIiwPxv wU004qXW9efXrNkhUcJ3Hdzj5WkoJq+8nMMd9w0= X-Received: from willmcvicker.c.googlers.com ([fda3:e722:ac3:10:24:72f4:c0a8:2dd0]) (user=willmcvicker job=sendgmr) by 2002:a25:25cc:: with SMTP id l195mr9819663ybl.383.1598297931004; Mon, 24 Aug 2020 12:38:51 -0700 (PDT) Date: Mon, 24 Aug 2020 19:38:31 +0000 In-Reply-To: <20200804113711.GA20988@salvia> Message-Id: <20200824193832.853621-1-willmcvicker@google.com> Mime-Version: 1.0 References: <20200804113711.GA20988@salvia> X-Mailer: git-send-email 2.28.0.297.g1956fa8f8d-goog Subject: [PATCH v3 0/1] netfilter: nat: add a range check for l3/l4 protonum From: Will McVicker To: stable@vger.kernel.org, Pablo Neira Ayuso , Jozsef Kadlecsik , Florian Westphal Cc: "David S. Miller" , Alexey Kuznetsov , Hideaki YOSHIFUJI , netfilter-devel@vger.kernel.org, coreteam@netfilter.org, netdev@vger.kernel.org, linux-kernel@vger.kernel.org, kernel-team@android.com, Will McVicker Content-Type: text/plain; charset="UTF-8" Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hi Pablo, > This patch is much smaller and if you confirm this is address the > issue, then this is awesome. Yes, I can confirm the updated patch does fix the kernel panic. I have retested on the Pixel 4 XL with version 4.14.180. Please see the updated patchset v3. Thanks, Will Will McVicker (1): netfilter: nat: add a range check for l3/l4 protonum net/netfilter/nf_conntrack_netlink.c | 2 ++ 1 file changed, 2 insertions(+) -- 2.28.0.297.g1956fa8f8d-goog