]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
netfilter: xt_CT: fix usersize for v1 and v2 revision
authorFlorian Westphal <fw@strlen.de>
Tue, 28 Apr 2026 17:37:57 +0000 (19:37 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 30 Apr 2026 06:03:22 +0000 (08:03 +0200)
commit8bedb6c46945752a688d9b0cf2021e0e68b1876c
tree479f250e52ef34ae724a4701029981ea8215d533
parent2f768d638d977eff824f64dcc9639e3fea32da8f
netfilter: xt_CT: fix usersize for v1 and v2 revision

While resurrecting the conntrack-tool test cases I found following bug:
In:
iptables -I OUTPUT -t raw -p 13 -j CT --timeout test-generic
Out:
[0:0] -A OUTPUT -p 13 -j CT --timeout test

Data after first four bytes of the timeout policy name is never
copied to userspace because its treated as kernel-only.

Fixes: ec2318904965 ("xtables: extend matches and targets with .usersize")
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/xt_CT.c