Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/1.0/patches/2223077/?format=api
{ "id": 2223077, "url": "http://patchwork.ozlabs.org/api/1.0/patches/2223077/?format=api", "project": { "id": 26, "url": "http://patchwork.ozlabs.org/api/1.0/projects/26/?format=api", "name": "Netfilter Development", "link_name": "netfilter-devel", "list_id": "netfilter-devel.vger.kernel.org", "list_email": "netfilter-devel@vger.kernel.org", "web_url": null, "scm_url": null, "webscm_url": null }, "msgid": "<20260414110811.6178-1-pablo@netfilter.org>", "date": "2026-04-14T11:08:11", "name": "[nf] netfilter: nft_osf: restrict it to ipv6", "commit_ref": null, "pull_url": null, "state": "new", "archived": false, "hash": "7adc2fc0c6180009acdaeb5c3fd41c3469d65269", "submitter": { "id": 1315, "url": "http://patchwork.ozlabs.org/api/1.0/people/1315/?format=api", "name": "Pablo Neira Ayuso", "email": "pablo@netfilter.org" }, "delegate": null, "mbox": "http://patchwork.ozlabs.org/project/netfilter-devel/patch/20260414110811.6178-1-pablo@netfilter.org/mbox/", "series": [ { "id": 499818, "url": "http://patchwork.ozlabs.org/api/1.0/series/499818/?format=api", "date": "2026-04-14T11:08:11", "name": "[nf] netfilter: nft_osf: restrict it to ipv6", "version": 1, "mbox": "http://patchwork.ozlabs.org/series/499818/mbox/" } ], "check": "pending", "checks": "http://patchwork.ozlabs.org/api/patches/2223077/checks/", "tags": {}, "headers": { "Return-Path": "\n <netfilter-devel+bounces-11868-incoming=patchwork.ozlabs.org@vger.kernel.org>", "X-Original-To": [ "incoming@patchwork.ozlabs.org", "netfilter-devel@vger.kernel.org" ], "Delivered-To": "patchwork-incoming@legolas.ozlabs.org", "Authentication-Results": [ "legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=netfilter.org header.i=@netfilter.org\n header.a=rsa-sha256 header.s=2025 header.b=WnoVS11w;\n\tdkim-atps=neutral", "legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=vger.kernel.org\n (client-ip=2600:3c15:e001:75::12fc:5321; helo=sin.lore.kernel.org;\n envelope-from=netfilter-devel+bounces-11868-incoming=patchwork.ozlabs.org@vger.kernel.org;\n receiver=patchwork.ozlabs.org)", "smtp.subspace.kernel.org;\n\tdkim=pass (2048-bit key) header.d=netfilter.org header.i=@netfilter.org\n header.b=\"WnoVS11w\"", "smtp.subspace.kernel.org;\n arc=none smtp.client-ip=217.70.190.124", "smtp.subspace.kernel.org;\n dmarc=none (p=none dis=none) header.from=netfilter.org", "smtp.subspace.kernel.org;\n spf=pass smtp.mailfrom=netfilter.org" ], "Received": [ "from sin.lore.kernel.org (sin.lore.kernel.org\n [IPv6:2600:3c15:e001:75::12fc:5321])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4fw1jM1srDz1y2d\n\tfor <incoming@patchwork.ozlabs.org>; Tue, 14 Apr 2026 21:08:23 +1000 (AEST)", "from smtp.subspace.kernel.org (conduit.subspace.kernel.org\n [100.90.174.1])\n\tby sin.lore.kernel.org (Postfix) with ESMTP id 2FFCF3010805\n\tfor <incoming@patchwork.ozlabs.org>; Tue, 14 Apr 2026 11:08:21 +0000 (UTC)", "from localhost.localdomain (localhost.localdomain [127.0.0.1])\n\tby smtp.subspace.kernel.org (Postfix) with ESMTP id 26C333D811B;\n\tTue, 14 Apr 2026 11:08:19 +0000 (UTC)", "from mail.netfilter.org (mail.netfilter.org [217.70.190.124])\n\t(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))\n\t(No client certificate requested)\n\tby smtp.subspace.kernel.org (Postfix) with ESMTPS id 430963D8127\n\tfor <netfilter-devel@vger.kernel.org>; Tue, 14 Apr 2026 11:08:17 +0000 (UTC)", "from localhost.localdomain (mail-agni [217.70.190.124])\n\tby mail.netfilter.org (Postfix) with ESMTPSA id 219A86028D\n\tfor <netfilter-devel@vger.kernel.org>; Tue, 14 Apr 2026 13:08:15 +0200 (CEST)" ], "ARC-Seal": "i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116;\n\tt=1776164898; cv=none;\n b=F/lngS+Y8AbhganHPapRQaXI1DwyS1VMqyyueDb9YIJulDmRA4muGXmcwHfg6CRYRpEYJYlPXfRrgf7OsfoLQqr/ceGZmlaleMex7ojMjgIbSQVmR9g3LRJP8ZCiJPoxSSTkdBvgWTGzUFlGE4aG98rDURgP4LuWX03iPviBwn0=", "ARC-Message-Signature": "i=1; a=rsa-sha256; d=subspace.kernel.org;\n\ts=arc-20240116; t=1776164898; c=relaxed/simple;\n\tbh=EcQJ7R5/vlUG+l9M4urrtglnmwq2y2eUq2o8l45QUME=;\n\th=From:To:Subject:Date:Message-ID:MIME-Version;\n b=HU38p+XyjTiekP6YRV4FIQU85v34y7taJV/rDxWqawE1I7sr2P2KTxezih+BqHowgOUksCOHTRHaMD/DwE73hUpRgqLGsyPdAdtAfHPNX0efnCzHyD6UxCLLz9WNxagbCSYAyxTybxfyc/dXfT7ZQIqrrObszieFoHk3cfMGzcY=", "ARC-Authentication-Results": "i=1; smtp.subspace.kernel.org;\n dmarc=none (p=none dis=none) header.from=netfilter.org;\n spf=pass smtp.mailfrom=netfilter.org;\n dkim=pass (2048-bit key) header.d=netfilter.org header.i=@netfilter.org\n header.b=WnoVS11w; arc=none smtp.client-ip=217.70.190.124", "DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed; d=netfilter.org;\n\ts=2025; t=1776164895;\n\tbh=XxZ2IVyQyR9Sy7Ez9hyROmVUWgU0CzbFuPnEqQ8JU9g=;\n\th=From:To:Subject:Date:From;\n\tb=WnoVS11wvt5XjLcWxvt3o+wk5+6wuK4+FusA2VqKukKyqs3aakEyrCaHt8ZSn4Li4\n\t wwXzS7ipYR1EDW5eKp4UaOBh+Jozw3nXHGkPPT2Q5YdTNUcYd58esqqheGnwA2Ajoh\n\t dBtBD6DsXvJAdymnYlM7H+97jTkLjj/hnFwFxbQfmyZ5wrrUFjnnbGHOkOOaDe4AZi\n\t dX6HRry3cmQ1ubeB+h16p1lQR0n5UO7vDB4ZX91bLah9Id3MP0VKzK10fEiYGjuhtE\n\t Vqbsu9I5wfzwbVxQDLKBYrlAJkkxpjHRnDsYVpT/fBiCQT7R2uHgWsYdDpSyZoTTsV\n\t IQdGr/wloa9jg==", "From": "Pablo Neira Ayuso <pablo@netfilter.org>", "To": "netfilter-devel@vger.kernel.org", "Subject": "[PATCH nf] netfilter: nft_osf: restrict it to ipv6", "Date": "Tue, 14 Apr 2026 13:08:11 +0200", "Message-ID": "<20260414110811.6178-1-pablo@netfilter.org>", "X-Mailer": "git-send-email 2.47.3", "Precedence": "bulk", "X-Mailing-List": "netfilter-devel@vger.kernel.org", "List-Id": "<netfilter-devel.vger.kernel.org>", "List-Subscribe": "<mailto:netfilter-devel+subscribe@vger.kernel.org>", "List-Unsubscribe": "<mailto:netfilter-devel+unsubscribe@vger.kernel.org>", "MIME-Version": "1.0", "Content-Transfer-Encoding": "8bit" }, "content": "This expression only supports for ipv4, restrict it.\n\nFixes: b96af92d6eaf (\"netfilter: nf_tables: implement Passive OS fingerprint module in nft_osf\")\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>\n---\n net/netfilter/nft_osf.c | 6 +++++-\n 1 file changed, 5 insertions(+), 1 deletion(-)", "diff": "diff --git a/net/netfilter/nft_osf.c b/net/netfilter/nft_osf.c\nindex 1c0b493ef0a9..bdc2f6c90e2f 100644\n--- a/net/netfilter/nft_osf.c\n+++ b/net/netfilter/nft_osf.c\n@@ -28,6 +28,11 @@ static void nft_osf_eval(const struct nft_expr *expr, struct nft_regs *regs,\n \tstruct nf_osf_data data;\n \tstruct tcphdr _tcph;\n \n+\tif (nft_pf(pkt) != NFPROTO_IPV4) {\n+\t\tregs->verdict.code = NFT_BREAK;\n+\t\treturn;\n+\t}\n+\n \tif (pkt->tprot != IPPROTO_TCP) {\n \t\tregs->verdict.code = NFT_BREAK;\n \t\treturn;\n@@ -114,7 +119,6 @@ static int nft_osf_validate(const struct nft_ctx *ctx,\n \n \tswitch (ctx->family) {\n \tcase NFPROTO_IPV4:\n-\tcase NFPROTO_IPV6:\n \tcase NFPROTO_INET:\n \t\thooks = (1 << NF_INET_LOCAL_IN) |\n \t\t\t(1 << NF_INET_PRE_ROUTING) |\n", "prefixes": [ "nf" ] }