Re: [PATCH net] net: bridge: Reject descending VLAN tunnel ranges
| Newsgroups | dev.linux.lists.bridge,org.kernel.vger.linux-kernel,org.kernel.vger.netdev |
|---|---|
| Message-ID | <178711140564.2835526.4256752863993963902.git-patchwork-notify@kernel.org> |
Hello: This patch was applied to netdev/net.git (main) by David S. Miller <[email protected]>: On Fri, 14 Aug 2026 21:40:53 +0800 you wrote: > A pair of descending VLAN and tunnel IDs can pass the tunnel range span > check. The VLAN subtraction produces a negative int, which is converted > to unsigned when compared with the u32 tunnel ID subtraction. It can > therefore equal the wrapped tunnel ID delta. > > The range loop then performs no iterations. Since the batched > notification handling added a post-loop error check, this leaves err > uninitialized and makes the request's return value unpredictable. > > [...] Here is the summary with links: - [net] net: bridge: Reject descending VLAN tunnel ranges https://git.kernel.org/netdev/net/c/40f04b51758e You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html