From: David S. Miller <davem@davemloft.net>
Date: Mon, 11 Jul 2022 10:58:38 +0000 (+0100)
Subject: Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf
X-Git-Tag: v6.6.17~7085^2~21
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=e45955766b4300e7bbeeaa1c31e0001fe16383e7;p=platform%2Fkernel%2Flinux-rpi.git

Merge git://git./linux/kernel/git/netfilter/nf

Pablo Neira Ayuso says:

====================
Netfilter fixes for net

The following patchset contains Netfilter fixes for net:

1) refcount_inc_not_zero() is not semantically equivalent to
   atomic_int_not_zero(), from Florian Westphal. My understanding was
   that refcount_*() API provides a wrapper to easier debugging of
   reference count leaks, however, there are semantic differences
   between these two APIs, where refcount_inc_not_zero() needs a barrier.
   Reason for this subtle difference to me is unknown.

2) packet logging is not correct for ARP and IP packets, from the
   ARP family and netdev/egress respectively. Use skb_network_offset()
   to reach the headers accordingly.

3) set element extension length have been growing over time, replace
   a BUG_ON by EINVAL which might be triggerable from userspace.
====================

Signed-off-by: David S. Miller <davem@davemloft.net>
---

e45955766b4300e7bbeeaa1c31e0001fe16383e7