{"id":2215854,"url":"http://patchwork.ozlabs.org/api/patches/2215854/?format=json","web_url":"http://patchwork.ozlabs.org/project/netfilter-devel/patch/20260325131108.23045-13-fw@strlen.de/","project":{"id":26,"url":"http://patchwork.ozlabs.org/api/projects/26/?format=json","name":"Netfilter Development","link_name":"netfilter-devel","list_id":"netfilter-devel.vger.kernel.org","list_email":"netfilter-devel@vger.kernel.org","web_url":null,"scm_url":null,"webscm_url":null,"list_archive_url":"","list_archive_url_format":"","commit_url_format":""},"msgid":"<20260325131108.23045-13-fw@strlen.de>","list_archive_url":null,"date":"2026-03-25T13:11:06","name":"[net,12/14] netfilter: nf_conntrack_expect: skip expectations in other netns via proc","commit_ref":null,"pull_url":null,"state":"handled-elsewhere","archived":true,"hash":"6b1f3d6c9c446fa603cbb1637ce3d201364af59c","submitter":{"id":1025,"url":"http://patchwork.ozlabs.org/api/people/1025/?format=json","name":"Florian Westphal","email":"fw@strlen.de"},"delegate":null,"mbox":"http://patchwork.ozlabs.org/project/netfilter-devel/patch/20260325131108.23045-13-fw@strlen.de/mbox/","series":[{"id":497441,"url":"http://patchwork.ozlabs.org/api/series/497441/?format=json","web_url":"http://patchwork.ozlabs.org/project/netfilter-devel/list/?series=497441","date":"2026-03-25T13:10:55","name":"[net,01/14] netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry","version":1,"mbox":"http://patchwork.ozlabs.org/series/497441/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/patches/2215854/comments/","check":"pending","checks":"http://patchwork.ozlabs.org/api/patches/2215854/checks/","tags":{},"related":[],"headers":{"Return-Path":"\n ","X-Original-To":["incoming@patchwork.ozlabs.org","netfilter-devel@vger.kernel.org"],"Delivered-To":"patchwork-incoming@legolas.ozlabs.org","Authentication-Results":["legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=vger.kernel.org\n (client-ip=172.232.135.74; helo=sto.lore.kernel.org;\n envelope-from=netfilter-devel+bounces-11406-incoming=patchwork.ozlabs.org@vger.kernel.org;\n receiver=patchwork.ozlabs.org)","smtp.subspace.kernel.org;\n arc=none smtp.client-ip=91.216.245.30","smtp.subspace.kernel.org;\n dmarc=none (p=none dis=none) header.from=strlen.de","smtp.subspace.kernel.org;\n spf=pass smtp.mailfrom=Chamillionaire.breakpoint.cc"],"Received":["from sto.lore.kernel.org (sto.lore.kernel.org [172.232.135.74])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4fgnnh6Lcvz1y1K\n\tfor ; Thu, 26 Mar 2026 00:29:44 +1100 (AEDT)","from smtp.subspace.kernel.org (conduit.subspace.kernel.org\n [100.90.174.1])\n\tby sto.lore.kernel.org (Postfix) with ESMTP id A7BC530E5758\n\tfor ; Wed, 25 Mar 2026 13:14:04 +0000 (UTC)","from localhost.localdomain (localhost.localdomain [127.0.0.1])\n\tby smtp.subspace.kernel.org (Postfix) with ESMTP id 5FA653DD505;\n\tWed, 25 Mar 2026 13:12:28 +0000 (UTC)","from Chamillionaire.breakpoint.cc (Chamillionaire.breakpoint.cc\n [91.216.245.30])\n\t(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))\n\t(No client certificate requested)\n\tby smtp.subspace.kernel.org (Postfix) with ESMTPS id F33B23D811D;\n\tWed, 25 Mar 2026 13:12:26 +0000 (UTC)","by Chamillionaire.breakpoint.cc (Postfix, from userid 1003)\n\tid A7DDD60AF7; Wed, 25 Mar 2026 14:12:25 +0100 (CET)"],"ARC-Seal":"i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116;\n\tt=1774444348; cv=none;\n b=BmHcnDJ1HSvhlZx5UzI4NBDxm5KfQ25rGWFlI3hMY9cg5hbO2vVcbKy4FQJQNTTcUuJoZASoDtDTi16aYFTqsfbox7LhgneHEAyUFDM1tKR8gPsM1ItPSTSjd/2cL4G729a24CB+H1ZVfsrBi43ZJ8OCqYVC9siKwcXu31/XbZk=","ARC-Message-Signature":"i=1; a=rsa-sha256; d=subspace.kernel.org;\n\ts=arc-20240116; t=1774444348; c=relaxed/simple;\n\tbh=sZdbC/Cquy068czgx4WOZ578Q5numL4ODExOIrYfXNs=;\n\th=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References:\n\t MIME-Version;\n b=ShKl9VbwioV4sM8+IlpVAUt1FYuYXU0xdElCS6qg8wLL8ITQ7gN0CMaRr34WeYLOypCUgIdVWTpD80Yt8L2V/SRPXZJgkcCmQpd/qJsqYvdJWvS1/RkZDo6MQmrJMfQmgcvMN7dTWPS7lV6r/4zOo5VTKZFrZN2BVN8afqR74Qs=","ARC-Authentication-Results":"i=1; smtp.subspace.kernel.org;\n dmarc=none (p=none dis=none) header.from=strlen.de;\n spf=pass smtp.mailfrom=Chamillionaire.breakpoint.cc;\n arc=none smtp.client-ip=91.216.245.30","From":"Florian Westphal ","To":"","Cc":"Paolo Abeni ,\n\t\"David S. Miller\" ,\n\tEric Dumazet ,\n\tJakub Kicinski ,\n\t,\n\tpablo@netfilter.org","Subject":"[PATCH net 12/14] netfilter: nf_conntrack_expect: skip expectations\n in other netns via proc","Date":"Wed, 25 Mar 2026 14:11:06 +0100","Message-ID":"<20260325131108.23045-13-fw@strlen.de>","X-Mailer":"git-send-email 2.52.0","In-Reply-To":"<20260325131108.23045-1-fw@strlen.de>","References":"<20260325131108.23045-1-fw@strlen.de>","Precedence":"bulk","X-Mailing-List":"netfilter-devel@vger.kernel.org","List-Id":"","List-Subscribe":"","List-Unsubscribe":"","MIME-Version":"1.0","Content-Transfer-Encoding":"8bit"},"content":"From: Pablo Neira Ayuso \n\nSkip expectations that do not reside in this netns.\n\nSimilar to e77e6ff502ea (\"netfilter: conntrack: do not dump other netns's\nconntrack entries via proc\").\n\nFixes: 5a1fb391d881 (\"netfilter: netns nf_conntrack: add ->ct_net -- pointer from conntrack to netns\")\nSigned-off-by: Pablo Neira Ayuso \nSigned-off-by: Florian Westphal \n---\n net/netfilter/nf_conntrack_expect.c | 4 ++++\n 1 file changed, 4 insertions(+)","diff":"diff --git a/net/netfilter/nf_conntrack_expect.c b/net/netfilter/nf_conntrack_expect.c\nindex 8896fb20b58e..509d3eb6f56a 100644\n--- a/net/netfilter/nf_conntrack_expect.c\n+++ b/net/netfilter/nf_conntrack_expect.c\n@@ -643,11 +643,15 @@ static int exp_seq_show(struct seq_file *s, void *v)\n {\n \tstruct nf_conntrack_expect *expect;\n \tstruct nf_conntrack_helper *helper;\n+\tstruct net *net = seq_file_net(s);\n \tstruct hlist_node *n = v;\n \tchar *delim = \"\";\n \n \texpect = hlist_entry(n, struct nf_conntrack_expect, hnode);\n \n+\tif (!net_eq(nf_ct_exp_net(expect), net))\n+\t\treturn 0;\n+\n \tif (expect->timeout.function)\n \t\tseq_printf(s, \"%ld \", timer_pending(&expect->timeout)\n \t\t\t ? (long)(expect->timeout.expires - jiffies)/HZ : 0);\n","prefixes":["net","12/14"]}