ACK: [SRU][F:linux-bluefield][PATCH 0/4] Fix ignoring ct state match of OVS offload to TC/HW

[Stefan Bader]

On 30.09.21 22:51, Bodong Wang wrote:
> When using OVS with tc to offload connection tracking flows, if user matches on
> ct_state other then trk and est, such as ct_state +rpl, it will be silently
> ignored by TC/HW and might result in wrong actions being executed.
> 
> This series from upstream fixed the bug.
> 
> Jakub Kicinski (1):
>    netlink: add mask validation
> 
> wenxu (3):
>    net/sched: cls_flower: Reject invalid ct_state flags rules
>    net/sched: cls_flower: validate ct_state for invalid and reply flags
>    net/sched: cls_flower: fix only mask bit check in the
>      validate_ct_state
> 
>   include/net/netlink.h        | 16 +++++++++++++
>   include/uapi/linux/pkt_cls.h |  2 ++
>   lib/nlattr.c                 | 36 +++++++++++++++++++++++++++++
>   net/sched/cls_flower.c       | 54 ++++++++++++++++++++++++++++++++++++++++++--
>   4 files changed, 106 insertions(+), 2 deletions(-)
> 
Acked-by: Stefan Bader <stefan.bader at canonical.com>

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20211007/2d653475/attachment.sig>