Re: [PATCH nf-next,v2] netfilter: nf_tables: call skb_valid_dst() before skb_dst()

Fernando Fernandez Mancera <[email protected]> Thu, 30 Jul 2026 15:00:21 +0200
Newsgroups gmane.comp.security.firewalls.netfilter.devel
Message-ID <[email protected]>
On 7/30/26 1:47 PM, Pablo Neira Ayuso wrote:
> When fetching the dst_entry from the skb, check if it valid, ie. this is
> not a template dst, for extensions that can be used from the netdev
> ingress and egress chains.
> 
> Signed-off-by: Pablo Neira Ayuso <[email protected]>

LGTM!

Reviewed-by: Fernando Fernandez Mancera <[email protected]>

Thanks!