Re: [PATCH nft] scanner: fix search_in_include_path test

2017-01-03 Thread Pablo Neira Ayuso
On Mon, Jan 02, 2017 at 04:30:01PM +0100, Anatole Denis wrote: > clang emits a warning in this function as we're using a boolean as the third > argument to strncmp. Indeed, this function only checks the first byte of the > path as is, so files beginning with . will be incorrectly included from the

Re: [PATCH v2 nf-next 0/2] netfilter: merge udp and udplite trackers

2017-01-03 Thread Pablo Neira Ayuso
On Tue, Dec 20, 2016 at 09:57:01PM +0100, Florian Westphal wrote: > Most of the code is copy&paste from the udp one; most of the udp > functions can also be used for udplite. Series applied, thanks Florian. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body o

Re: [PATCH nf-next 1/2] netfilter: nf_tables: add missing descriptions in nft_ct_keys

2017-01-03 Thread Pablo Neira Ayuso
On Sun, Dec 25, 2016 at 07:58:58PM +0800, Liping Zhang wrote: > From: Liping Zhang > > We missed to add descriptions about NFT_CT_LABELS, NFT_CT_PKTS and > NFT_CT_BYTES, now add it. Applied, thanks. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a me

Re: [PATCH nf-next 2/2] netfilter: nft_ct: add average bytes per packet support

2017-01-03 Thread Pablo Neira Ayuso
On Sun, Dec 25, 2016 at 07:58:59PM +0800, Liping Zhang wrote: > From: Liping Zhang > > Similar to xt_connbytes, user can match how many average bytes per packet > a connection has transferred so far. Also applied, thanks. -- To unsubscribe from this list: send the line "unsubscribe netfilter-dev

Re: [PATCH libnftnl] src: ct: add average bytes per packet counter support

2017-01-03 Thread Pablo Neira Ayuso
Also applied, thanks. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html

[PATCH] uapi: use wildcards to list files

2017-01-03 Thread Nicolas Dichtel
Regularly, when a new header is created in include/uapi/, the developer forgets to add it in the corresponding Kbuild file. This error is usually detected after the release is out. In fact, all headers under include/uapi/ should be exported, so let's use wildcards. After this patch, the following

Re: [PATCH] uapi: use wildcards to list files

2017-01-03 Thread David Miller
From: Nicolas Dichtel Date: Tue, 3 Jan 2017 15:35:44 +0100 > Regularly, when a new header is created in include/uapi/, the developer > forgets to add it in the corresponding Kbuild file. This error is usually > detected after the release is out. > > In fact, all headers under include/uapi/ shou

[PATCH net-next v2 13/27] bridge: use __vlan_hwaccel helpers

2017-01-03 Thread Michał Mirosław
This removes assumption than vlan_tci != 0 when tag is present. Signed-off-by: Michał Mirosław --- net/bridge/br_netfilter_hooks.c | 15 +-- net/bridge/br_private.h | 2 +- net/bridge/br_vlan.c| 6 +++--- 3 files changed, 13 insertions(+), 10 deletions(-) diff

[PATCH net-next v2 16/27] nfnetlink/queue: use __vlan_hwaccel helpers

2017-01-03 Thread Michał Mirosław
Signed-off-by: Michał Mirosław --- net/netfilter/nfnetlink_queue.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/net/netfilter/nfnetlink_queue.c b/net/netfilter/nfnetlink_queue.c index 3ee0b8a000a4..8c7923aac826 100644 --- a/net/netfilter/nfnetlink_queue.c +++ b/net/net

Re: [PATCH] uapi: use wildcards to list files

2017-01-03 Thread Arnd Bergmann
On Tuesday, January 3, 2017 3:35:44 PM CET Nicolas Dichtel wrote: > Regularly, when a new header is created in include/uapi/, the developer > forgets to add it in the corresponding Kbuild file. This error is usually > detected after the release is out. > > In fact, all headers under include/uapi/

Re: build failure if --with-xtables [WAS: nftables 0.7 release]

2017-01-03 Thread Robby Workman
On Tue, 20 Dec 2016 21:46:36 +0100 Pablo Neira Ayuso wrote: > Hi! > > The Netfilter project proudly presents: > > nftables 0.7 > > This release contains many accumulated bug fixes and new features > available up to the (upcoming) Linux 4.10-rc1 kernel release. > > * Facilitate migrati

[PATCH net-next] nfnetlink/queue: use __vlan_hwaccel helpers

2017-01-03 Thread Michał Mirosław
Signed-off-by: Michał Mirosław --- net/netfilter/nfnetlink_queue.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/net/netfilter/nfnetlink_queue.c b/net/netfilter/nfnetlink_queue.c index 3ee0b8a000a4..8c7923aac826 100644 --- a/net/netfilter/nfnetlink_queue.c +++ b/net/net

[PATCH net-next 5/8] bridge: use __vlan_hwaccel helpers

2017-01-03 Thread Michał Mirosław
This removes assumption than vlan_tci != 0 when tag is present. Signed-off-by: Michał Mirosław --- net/bridge/br_netfilter_hooks.c | 15 +-- net/bridge/br_private.h | 2 +- net/bridge/br_vlan.c| 6 +++--- 3 files changed, 13 insertions(+), 10 deletions(-) diff

Re: [PATCH xtables-addons] build: support for Linux 4.10

2017-01-03 Thread Jan Engelhardt
On Monday 2016-12-26 16:14, Ralph Sennhauser wrote: >Commit 613dbd95723aee7abd16860745691b6c7bda20dc (netfilter: >x_tables: move hook state into xt_action_param structure) changes the >struct xt_action_param, accommodate for it. Both applied. -- To unsubscribe from this list: send the line "unsub

Re: build failure if --with-xtables [WAS: nftables 0.7 release]

2017-01-03 Thread Arturo Borrero Gonzalez
On 3 January 2017 at 22:56, Robby Workman wrote: > On Tue, 20 Dec 2016 21:46:36 +0100 > Pablo Neira Ayuso wrote: > >> Hi! >> >> The Netfilter project proudly presents: >> >> nftables 0.7 >> >> This release contains many accumulated bug fixes and new features >> available up to the (upcomi