Re: [PATCH nf v5 1/1] bridge: br_netfilter: pin bridge device while NFQUEUE holds fake dst
Yuan Tan <[email protected]>
| Newsgroups | gmane.comp.security.firewalls.netfilter.devel |
|---|---|
| Message-ID | <CAPuPA7+RirdtnkJ2-RLpVcO1gEDn_wiCayGWBS1gDciAe1BxwA@mail.gmail.com> |
On Fri, Jul 3, 2026 at 11:27 PM Florian Westphal <[email protected]> wrote: > > Haoze Xie <[email protected]> wrote: > > > --- a/net/netfilter/nfnetlink_queue.c > > > +++ b/net/netfilter/nfnetlink_queue.c > > > @@ -1214,6 +1214,9 @@ dev_cmp(struct nf_queue_entry *entry, unsigned long ifindex) > > > > > > if (physinif == ifindex || physoutif == ifindex) > > > return 1; > > > + > > > + if (entry->bridge_dev && entry->bridge_dev->ifindex == ifindex) > > > + return 1; > > > #endif > > > if (entry->skb_dev && entry->skb_dev->ifindex == ifindex) > > > return 1; > > > > Hi, is there any follow up about this patch? > > What do you mean, can you elaborate? > > What is wrong with > > c9c9b37f8c55 ("netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst") > > If the patch is not sufficient, please submit a followup. Sorry, we thought this patch had not been reviewed or merged. The patch is good and we just notice this patch has already been merged: https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf.git/commit/?id=c9c9b37f8c5505224e8d206184df3bb668ee00cf