]> git.ipfire.org Git - thirdparty/linux.git/commit
netfilter: nft_flow_offload: zero device address for non-ether case
authorFlorian Westphal <fw@strlen.de>
Thu, 18 Jun 2026 06:25:47 +0000 (08:25 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Sat, 20 Jun 2026 22:18:27 +0000 (00:18 +0200)
commite409c23c2d0630f3b95efd12428b2e58800b7645
tree2587047c74cfc52d554381b797dd74338e26d14b
parentbff1c8b49a9cb5c04af20f4e7d43bf4af5863bc6
netfilter: nft_flow_offload: zero device address for non-ether case

LLM points out that the skip causes unitialised stack array to
propagate down into dev_fill_forward_path().  Its not clear to me that
there is a guarantee that a later ctx.dev->netdev_ops->ndo_fill_forward_path()
would always fix this up.

Cc: Felix Fietkau <nbd@nbd.name>
Fixes: 45ca3e61999e ("netfilter: nft_flow_offload: skip dst neigh lookup for ppp devices")
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_flow_table_path.c