netdev - [PATCH net-next 0/4] Netfilter/IPVS updates for net-next

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <20250111230800.67349-1-pablo@netfilter.org>
Date: Sun, 12 Jan 2025 00:07:56 +0100
From: Pablo Neira Ayuso <pablo@...filter.org>
To: netfilter-devel@...r.kernel.org
Cc: davem@...emloft.net,
	netdev@...r.kernel.org,
	kuba@...nel.org,
	pabeni@...hat.com,
	edumazet@...gle.com,
	fw@...len.de,
	kadlec@...filter.org
Subject: [PATCH net-next 0/4] Netfilter/IPVS updates for net-next

Hi,

The following patchset contains a small batch of Netfilter/IPVS updates
for net-next:

1) Remove unused genmask parameter in nf_tables_addchain()

2) Speed up reads from /proc/net/ip_vs_conn, from Florian Westphal.

3) Skip empty buckets in hashlimit to avoid atomic operations that results
   in false positive reports by syzbot with lockdep enabled, patch from
   Eric Dumazet.

4) Add conntrack event timestamps available via ctnetlink,
   from Florian Westphal.

Please, pull these changes from:

  git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next.git nf-next-25-01-11

Thanks.

----------------------------------------------------------------

The following changes since commit 3e5908172c05ab1511f2a6719b806d6eda6e1715:

  Merge tag 'ieee802154-for-net-next-2025-01-03' of git://git.kernel.org/pub/scm/linux/kernel/git/wpan/wpan-next (2025-01-04 17:02:55 -0800)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next.git tags/nf-next-25-01-11

for you to fetch changes up to 601731fc7c6111bbca49ce3c9499c2e4d426079d:

  netfilter: conntrack: add conntrack event timestamp (2025-01-09 14:42:16 +0100)

----------------------------------------------------------------
netfilter pull request 25-01-11

----------------------------------------------------------------
Eric Dumazet (1):
      netfilter: xt_hashlimit: htable_selective_cleanup() optimization

Florian Westphal (2):
      ipvs: speed up reads from ip_vs_conn proc file
      netfilter: conntrack: add conntrack event timestamp

tuqiang (1):
      netfilter: nf_tables: remove the genmask parameter

 include/net/netfilter/nf_conntrack_ecache.h        | 12 ++++++
 include/uapi/linux/netfilter/nfnetlink_conntrack.h |  1 +
 net/netfilter/ipvs/ip_vs_conn.c                    | 50 ++++++++++++----------
 net/netfilter/nf_conntrack_ecache.c                | 23 ++++++++++
 net/netfilter/nf_conntrack_netlink.c               | 25 +++++++++++
 net/netfilter/nf_tables_api.c                      |  7 ++-
 net/netfilter/xt_hashlimit.c                       |  6 ++-
 7 files changed, 97 insertions(+), 27 deletions(-)