Re: [PATCH nf 0/2] ipvs: csum validations, part 2

	Hello,

On Mon, 27 Jul 2026, Julian Anastasov wrote:

>         This patchset contains more fixes after the
> previous batch of fixes for checksum validations.
> 
>         The first patch avoids reading the IPv4 ihl field
> multiple times to prevent local attacker to cause
> out-of-bounds write in ip_vs_nat_icmp.
> 
>         The second patch returns the per-proto checksum
> validations which can be needed for the FORWARD hook and
> provides helper for ICMP.
> 
> Julian Anastasov (2):
>   ipvs: avoid out-of-bounds write in ip_vs_nat_icmp
>   ipvs: return the per-proto csum validations

	According to Sashiko we are returning to broken
TCP/UDP checksum for IPv6 on CHECKSUM_COMPLETE, will send v2...

https://sashiko.dev/#/patchset/20260727185024.67534-1-ja%40ssi.bg

pw-bot: changes-requested

> 
>  include/net/ip_vs.h                   |  31 +-------
>  net/netfilter/ipvs/ip_vs_core.c       | 102 ++++++++++++++++----------
>  net/netfilter/ipvs/ip_vs_proto_sctp.c |   2 +-
>  net/netfilter/ipvs/ip_vs_proto_tcp.c  |  40 +++++++++-
>  net/netfilter/ipvs/ip_vs_proto_udp.c  |  47 ++++++++++--
>  net/netfilter/ipvs/ip_vs_xmit.c       |   2 +-
>  6 files changed, 143 insertions(+), 81 deletions(-)

Regards

--
Julian Anastasov <[email protected]>