Re: [PATCH nf v5 1/1] bridge: br_netfilter: pin bridge device while NFQUEUE holds fake dst

Yuan Tan <[email protected]>
Newsgroups gmane.comp.security.firewalls.netfilter.devel
Message-ID <CAPuPA7+RirdtnkJ2-RLpVcO1gEDn_wiCayGWBS1gDciAe1BxwA@mail.gmail.com>
On Fri, Jul 3, 2026 at 11:27 PM Florian Westphal <[email protected]> wrote:
>
> Haoze Xie <[email protected]> wrote:
> > > --- a/net/netfilter/nfnetlink_queue.c
> > > +++ b/net/netfilter/nfnetlink_queue.c
> > > @@ -1214,6 +1214,9 @@ dev_cmp(struct nf_queue_entry *entry, unsigned long ifindex)
> > >
> > >     if (physinif == ifindex || physoutif == ifindex)
> > >             return 1;
> > > +
> > > +   if (entry->bridge_dev && entry->bridge_dev->ifindex == ifindex)
> > > +           return 1;
> > >  #endif
> > >     if (entry->skb_dev && entry->skb_dev->ifindex == ifindex)
> > >             return 1;
> >
> > Hi, is there any follow up about this patch?
>
> What do you mean, can you elaborate?
>
> What is wrong with
>
> c9c9b37f8c55 ("netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst")
>
> If the patch is not sufficient, please submit a followup.

Sorry, we thought this patch had not been reviewed or merged.

The patch is good and we just notice this patch has already been merged:
https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf.git/commit/?id=c9c9b37f8c5505224e8d206184df3bb668ee00cf
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.