]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
netfilter: nf_conntrack_expect: zero at allocation time
authorFlorian Westphal <fw@strlen.de>
Wed, 24 Jun 2026 21:06:43 +0000 (23:06 +0200)
committerFlorian Westphal <fw@strlen.de>
Tue, 30 Jun 2026 03:31:11 +0000 (05:31 +0200)
commit241ccd2fed9051db443aadce248fc0ab30f55e97
tree694ed227fabb95ee6216e221ff8b9a084a1c0f80
parent1398b1014909618f65ff6bcebcb2ee5ccd44fdc0
netfilter: nf_conntrack_expect: zero at allocation time

There are occasional LLM hints wrt. leaking uninitialized data to
userspace via ctnetlink.  Just zero at allocation time,
expectations are not frequently used these days.

Intentionally keeps _init as-is because we could theoretically
support re-init, so add the missing exp->dir there.

Signed-off-by: Florian Westphal <fw@strlen.de>
net/netfilter/nf_conntrack_expect.c
net/netfilter/nf_conntrack_netlink.c