diff options
| author |   Florian Westphal <fw@strlen.de> | 2025-05-23 14:20:44 +0200 |
|---|---|---|
| committer |   Pablo Neira Ayuso <pablo@netfilter.org> | 2025-06-05 10:49:58 +0200 |
| commit | ea77c397bff8b6d59f6d83dae1425b08f465e8b5 (patch) | |
| tree | 801c3af07781d3924015d8d09fd4aa365b7896b7 /net/lapb/lapb_timer.c | |
| parent | gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (diff) | |
| download | wireguard-linux-ea77c397bff8b6d59f6d83dae1425b08f465e8b5.tar.xz wireguard-linux-ea77c397bff8b6d59f6d83dae1425b08f465e8b5.zip | |
netfilter: nf_set_pipapo_avx2: fix initial map fill
If the first field doesn't cover the entire start map, then we must zero
out the remainder, else we leak those bits into the next match round map.
The early fix was incomplete and did only fix up the generic C
implementation.
A followup patch adds a test case to nft_concat_range.sh.
Fixes: 791a615b7ad2 ("netfilter: nf_set_pipapo: fix initial map fill")
Signed-off-by: Florian Westphal <fw@strlen.de>
Reviewed-by: Stefano Brivio <sbrivio@redhat.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/lapb/lapb_timer.c')
0 files changed, 0 insertions, 0 deletions