]> git.ipfire.org Git - thirdparty/iptables.git/commit
extensions: string: Adjust description of --to to recent kernel changes
authorPhil Sutter <phil@nwl.cc>
Tue, 24 Oct 2023 09:57:31 +0000 (11:57 +0200)
committerPhil Sutter <phil@nwl.cc>
Wed, 25 Oct 2023 15:23:57 +0000 (17:23 +0200)
commitccecb1b90ae2af6e963d27ada8d5fd69d40231c4
treefddb4d1504132f49d8b9a6179160edae9b4882ad
parent920ece2b392fb83bd26416e0e6f8f6a847aacbaa
extensions: string: Adjust description of --to to recent kernel changes

This reverts commit 920ece2b392fb83bd26416e0e6f8f6a847aacbaa.

Since kernel commit c4eee56e14fe ("net: skb_find_text: Ignore patterns
extending past 'to'"), pattern scanning no longer happens past --to
offset even if skb_seq_read() returned a larger block. Point this out in
the description and also drop the '-1' offset which is not true as
kernel's selftest in tools/testing/selftests/netfilter/xt_string.sh
shows.

Closes: https://bugzilla.netfilter.org/show_bug.cgi?id=1707
Signed-off-by: Phil Sutter <phil@nwl.cc>
extensions/libxt_string.man