Pablo Neira Ayuso says: ==================== Netfilter/IPVS fixes for net The following patchset contains Netfilter/IPVS fixes for your net tree, they are: 1) Fix packet drops due to incorrect ECN handling in IPVS, from Vadim Fedorenko. 2) Fix splat with mark restoration in xt_socket with non-full-sock, patch from Subash Abhinov Kasiviswanathan. 3) ipset bogusly bails out when adding IPv4 range containing more than 2^31 addresses, from Jozsef Kadlecsik. 4) Incorrect pernet unregistration order in ipset, from Florian Westphal. 5) Races between dump and swap in ipset results in BUG_ON splats, from Ross Lagerwall. 6) Fix chain renames in nf_tables, from JingPiao Chen. 7) Fix race in pernet codepath with ebtables table registration, from Artem Savkov. 8) Memory leak in error path in set name allocation in nf_tables, patch from Arvind Yadav. 9) Don't dump chain counters if they are not available, this fixes a crash when listing the ruleset. 10) Fix out of bound memory read in strlcpy() in x_tables compat code, from Eric Dumazet. 11) Make sure we only process TCP packets in SYNPROXY hooks, patch from Lin Zhang. 12) Cannot load rules incrementally anymore after xt_bpf with pinned objects, added in revision 1. From Shmulik Ladkani. ====================
Showing the changes to include/uapi/linux (1 of 26 files). Show all
Unified · Split
| @@ -23,6 +23,7 @@ enum xt_bpf_modes { · 22 unmodified lines | ||
| 23 | 23 | XT_BPF_MODE_FD_PINNED, |
| 24 | 24 | XT_BPF_MODE_FD_ELF, |
| 25 | 25 | }; |
| 26 | +#define XT_BPF_MODE_PATH_PINNED XT_BPF_MODE_FD_PINNED | |
| 26 | 27 | |
| 27 | 28 | struct xt_bpf_info_v1 { |
| 28 | 29 | __u16 mode; |