{"id":2232171,"url":"http://patchwork.ozlabs.org/api/covers/2232171/?format=json","web_url":"http://patchwork.ozlabs.org/project/netfilter-devel/cover/20260503083220.630655-1-rc@rexion.ai/","project":{"id":26,"url":"http://patchwork.ozlabs.org/api/projects/26/?format=json","name":"Netfilter Development","link_name":"netfilter-devel","list_id":"netfilter-devel.vger.kernel.org","list_email":"netfilter-devel@vger.kernel.org","web_url":null,"scm_url":null,"webscm_url":null,"list_archive_url":"","list_archive_url_format":"","commit_url_format":""},"msgid":"<20260503083220.630655-1-rc@rexion.ai>","list_archive_url":null,"date":"2026-05-03T08:32:16","name":"[net-next,v3,0/4] netfilter: conntrack: shared port parser for helpers","submitter":{"id":93293,"url":"http://patchwork.ozlabs.org/api/people/93293/?format=json","name":"HACKE-RC","email":"rc@rexion.ai"},"mbox":"http://patchwork.ozlabs.org/project/netfilter-devel/cover/20260503083220.630655-1-rc@rexion.ai/mbox/","series":[{"id":502571,"url":"http://patchwork.ozlabs.org/api/series/502571/?format=json","web_url":"http://patchwork.ozlabs.org/project/netfilter-devel/list/?series=502571","date":"2026-05-03T08:32:16","name":"netfilter: conntrack: shared port parser for helpers","version":3,"mbox":"http://patchwork.ozlabs.org/series/502571/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/covers/2232171/comments/","headers":{"Return-Path":"\n ","X-Original-To":["incoming@patchwork.ozlabs.org","netfilter-devel@vger.kernel.org"],"Delivered-To":"patchwork-incoming@legolas.ozlabs.org","Authentication-Results":["legolas.ozlabs.org;\n\tdkim=fail reason=\"key not found in DNS\" header.d=rexion.ai\n header.i=@rexion.ai header.a=rsa-sha256 header.s=spacemail header.b=j94Khmym;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=vger.kernel.org\n (client-ip=2600:3c09:e001:a7::12fc:5321; helo=sto.lore.kernel.org;\n envelope-from=netfilter-devel+bounces-12395-incoming=patchwork.ozlabs.org@vger.kernel.org;\n receiver=patchwork.ozlabs.org)","smtp.subspace.kernel.org;\n\tdkim=fail reason=\"key not found in DNS\" (0-bit key) header.d=rexion.ai\n header.i=@rexion.ai header.b=\"j94Khmym\"","smtp.subspace.kernel.org;\n arc=none smtp.client-ip=66.29.159.77","smtp.subspace.kernel.org;\n dmarc=none (p=none dis=none) header.from=rexion.ai","smtp.subspace.kernel.org;\n spf=pass smtp.mailfrom=rexion.ai"],"Received":["from sto.lore.kernel.org (sto.lore.kernel.org\n [IPv6:2600:3c09:e001:a7::12fc:5321])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g7dM70T99z1y04\n\tfor ; Sun, 03 May 2026 18:32:50 +1000 (AEST)","from smtp.subspace.kernel.org (conduit.subspace.kernel.org\n [100.90.174.1])\n\tby sto.lore.kernel.org (Postfix) with ESMTP id EEB2D3004DEA\n\tfor ; Sun, 3 May 2026 08:32:44 +0000 (UTC)","from localhost.localdomain (localhost.localdomain [127.0.0.1])\n\tby smtp.subspace.kernel.org (Postfix) with ESMTP id 4AD6D3876B8;\n\tSun, 3 May 2026 08:32:40 +0000 (UTC)","from out-06.smtp.spacemail.com (out-06.smtp.spacemail.com\n [66.29.159.77])\n\t(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))\n\t(No client certificate requested)\n\tby smtp.subspace.kernel.org (Postfix) with ESMTPS id 89C7C273D8D;\n\tSun, 3 May 2026 08:32:38 +0000 (UTC)","from Kyren (unknown [49.207.224.37])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest\n SHA256)\n\t(No client certificate requested)\n\tby mail.spacemail.com (Postfix) with ESMTPSA id 4g7dLh4k4Kz8sc7;\n\tSun, 03 May 2026 08:32:28 +0000 (UTC)"],"ARC-Seal":"i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116;\n\tt=1777797159; cv=none;\n b=AB15X73zvLxaVcR4Gd6nT4FB1z9lBzgs2Gtd/Xp1uSeL0UWsu7oaAOau/363qcNde/J+YGzT3w+3wWELw+fFrfiS2tbQNWDggtji86W+a9aEzh3Ql7KCm51TcGfYdNu5gAPjC4DwdvsR8nw5qEzsPmEXbe+mJCdgFeTmbnU974k=","ARC-Message-Signature":"i=1; a=rsa-sha256; d=subspace.kernel.org;\n\ts=arc-20240116; t=1777797159; c=relaxed/simple;\n\tbh=S3bdgBPGI79X4uU8E8SKCYpMjmNwlQs0xu68QWji2lc=;\n\th=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References:\n\t MIME-Version;\n b=vFqnLkDDOc5DrXSzeHLP9CmVJVCGSpjG5tWzsPr4BJTw0vgHzKq5p9CvaXU+sliSFUTdT69iR3k0VyEwZ14fbbgqhcltgsot991tys53a/V8/Zv+Vf1Y7S9BMf9OHiFODqsk4g7aF2ZdKSNDAvwr30ABU9R13Me4iMmbXCrDna0=","ARC-Authentication-Results":"i=1; smtp.subspace.kernel.org;\n dmarc=none (p=none dis=none) header.from=rexion.ai;\n spf=pass smtp.mailfrom=rexion.ai;\n dkim=fail (0-bit key) header.d=rexion.ai header.i=@rexion.ai\n header.b=j94Khmym reason=\"key not found in DNS\";\n arc=none smtp.client-ip=66.29.159.77","DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=rexion.ai;\n\ts=spacemail; t=1777797152;\n\tbh=+2SH8ZXr4rVy0HR2sYavhqA8v3/knTQ2qsNiVVXoX/c=;\n\th=From:To:Cc:Subject:Date:In-Reply-To:References:From;\n\tb=j94KhmymVkpe292xwwUtIaInwZteiKw6ZoinBYUhY18MQqhYdsiv0jly0FRGWchg6\n\t 10+fxaGfR9XTi7HnDyD6LHFf3lvnPI3rCV4kNuwNTi+h/GIrxC6BlON8Koe8GMlg2c\n\t deMe5CF+apxclK86kS8jJErPYbD/pBuogwyHKQ11Et68b68/U60mPB1UU3ImF2Lyx/\n\t AEoTsLd4G+bMyw5oBlDDMyWNw6aCQyqHmlXEGqZrDOsN/9xjudpeY8RdvwQEW7Lm+B\n\t J/bQO8zQwP6dsE3/h6xOnluSOyd7XOtUBAZyaUWUm8l7wcP7b1poFucNKGk9gSWuUv\n\t RkxddHBgwKCkA==","From":"HACKE-RC ","To":"Pablo Neira Ayuso ,\n\tFlorian Westphal ","Cc":"Phil Sutter ,\n\t\"David S . Miller\" ,\n\tEric Dumazet ,\n\tJakub Kicinski ,\n\tPaolo Abeni ,\n\tSimon Horman ,\n\tnetfilter-devel@vger.kernel.org,\n\tcoreteam@netfilter.org,\n\tnetdev@vger.kernel.org,\n\tlinux-kernel@vger.kernel.org,\n\tHACKE-RC ","Subject":"[PATCH net-next v3 0/4] netfilter: conntrack: shared port parser for\n helpers","Date":"Sun, 3 May 2026 14:02:16 +0530","Message-ID":"<20260503083220.630655-1-rc@rexion.ai>","X-Mailer":"git-send-email 2.54.0","In-Reply-To":"","References":"","Precedence":"bulk","X-Mailing-List":"netfilter-devel@vger.kernel.org","List-Id":"","List-Subscribe":"","List-Unsubscribe":"","MIME-Version":"1.0","Content-Transfer-Encoding":"8bit","X-Envelope-From":"rc@rexion.ai"},"content":"Both nf_conntrack_irc and nf_conntrack_amanda parse port numbers from\napplication-layer data using simple_strtoul(), which requires\nNUL-terminated input and returns unsigned long without range validation.\n\nThis series introduces two shared helpers in the conntrack core:\n\n nf_ct_helper_parse_uint() -- generic bounded integer parser that\n operates on a length-delimited buffer without requiring NUL\n termination.\n\n nf_ct_helper_parse_port() -- calls nf_ct_helper_parse_uint() with\n max=65535 and rejects port zero.\n\nPatches 2 and 3 convert IRC and Amanda to use nf_ct_helper_parse_port().\nPatch 4 converts the two port-parsing sites in nf_conntrack_sip to use\nnf_ct_helper_parse_port() as well, retaining the SIP-specific minimum\nport check (>= 1024).\n\nv3: add nf_ct_helper_parse_uint() as the generic base; nf_ct_helper_parse_port()\n is now a thin wrapper; extend the series with a fourth patch converting\n nf_conntrack_sip (Phil Sutter)\nv2: replace simple_strtoul() with a shared nf_ct_helper_parse_port()\n in the conntrack helper core, modelled on 8cf6809cddcb (Florian Westphal)\nv1: inline range checks in IRC and Amanda\n\nHACKE-RC (4):\n netfilter: conntrack: add shared port and uint parsers for helpers\n netfilter: nf_conntrack_irc: use nf_ct_helper_parse_port()\n netfilter: nf_conntrack_amanda: use nf_ct_helper_parse_port()\n netfilter: nf_conntrack_sip: use nf_ct_helper_parse_port()\n\n include/net/netfilter/nf_conntrack_helper.h | 5 +++\n net/netfilter/nf_conntrack_amanda.c | 11 +++---\n net/netfilter/nf_conntrack_helper.c | 39 +++++++++++++++++++++\n net/netfilter/nf_conntrack_irc.c | 4 ++-\n net/netfilter/nf_conntrack_sip.c | 14 ++++----\n 5 files changed, 61 insertions(+), 12 deletions(-)"}