[PATCH nf 0/2] ipvs: csum validations, part 2

	Hello,

        This patchset contains more fixes after the
previous batch of fixes for checksum validations.

        The first patch avoids reading the IPv4 ihl field
multiple times to prevent local attacker to cause
out-of-bounds write in ip_vs_nat_icmp.

        The second patch returns the per-proto checksum
validations which can be needed for the FORWARD hook and
provides helper for ICMP.

Julian Anastasov (2):
  ipvs: avoid out-of-bounds write in ip_vs_nat_icmp
  ipvs: return the per-proto csum validations

 include/net/ip_vs.h                   |  31 +-------
 net/netfilter/ipvs/ip_vs_core.c       | 102 ++++++++++++++++----------
 net/netfilter/ipvs/ip_vs_proto_sctp.c |   2 +-
 net/netfilter/ipvs/ip_vs_proto_tcp.c  |  40 +++++++++-
 net/netfilter/ipvs/ip_vs_proto_udp.c  |  47 ++++++++++--
 net/netfilter/ipvs/ip_vs_xmit.c       |   2 +-
 6 files changed, 143 insertions(+), 81 deletions(-)

-- 
2.55.0