)]}'
{
  "commit": "0c82f2d6a4032a3cd3bc73599f20618958578fc5",
  "tree": "259dba20df1f914d1b0795fac23a4b04b3436d42",
  "parents": [
    "9e310de8b0452edcf88c6409ae57f3b120d9ca23"
  ],
  "author": {
    "name": "Florian Westphal",
    "email": "fw@strlen.de",
    "time": "Tue Mar 10 00:26:46 2026 +0100"
  },
  "committer": {
    "name": "Florian Westphal",
    "email": "fw@strlen.de",
    "time": "Wed Mar 11 22:26:52 2026 +0100"
  },
  "message": "netfilter: add more netlink-based policy range checks\n\nThese spots either already check the attribute range manually\nbefore use or the consuming functions tolerate unexpected values.\n\nNevertheless, add more range checks via netlink policy so we gain\nmore users and avoid possible re-use in other places that might\nnot have the required manual checks.  This also improves error\nreporting: netlink core can generate extack errors.\n\nSigned-off-by: Florian Westphal \u003cfw@strlen.de\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "26071021e986f6e3f6f71cf12fba8bd11a2390bd",
      "old_mode": 33188,
      "old_path": "include/uapi/linux/netfilter/nf_conntrack_common.h",
      "new_id": "9def1c6f1f2da140f4d9a2d4cc5ca7aa58914fec",
      "new_mode": 33188,
      "new_path": "include/uapi/linux/netfilter/nf_conntrack_common.h"
    },
    {
      "type": "modify",
      "old_id": "a2fe711cb5e3672198dcef86af54aa6964b63318",
      "old_mode": 33188,
      "old_path": "net/netfilter/ipset/ip_set_core.c",
      "new_id": "2204c90ce17b288e45a24eca399104a47bf80888",
      "new_mode": 33188,
      "new_path": "net/netfilter/ipset/ip_set_core.c"
    },
    {
      "type": "modify",
      "old_id": "9b295867a105efefd9e39b77e58c1c3f16479147",
      "old_mode": 33188,
      "old_path": "net/netfilter/nf_conntrack_netlink.c",
      "new_id": "f6d5c6759f343dbd5db005b72de9255d573a7069",
      "new_mode": 33188,
      "new_path": "net/netfilter/nf_conntrack_netlink.c"
    },
    {
      "type": "modify",
      "old_id": "0c1d086e96cb3f69a6849b1fca6666714c4e0a98",
      "old_mode": 33188,
      "old_path": "net/netfilter/nf_conntrack_proto_tcp.c",
      "new_id": "1efc807c12c2f83c0c039262ba84486018df751b",
      "new_mode": 33188,
      "new_path": "net/netfilter/nf_conntrack_proto_tcp.c"
    },
    {
      "type": "modify",
      "old_id": "e72a9da85e29021c58dda5c9fb709fd43ce6e2b9",
      "old_mode": 33188,
      "old_path": "net/netfilter/nf_tables_api.c",
      "new_id": "163510b6307f151e5b3a674a82a8970ac51f5f26",
      "new_mode": 33188,
      "new_path": "net/netfilter/nf_tables_api.c"
    },
    {
      "type": "modify",
      "old_id": "2bfaa773d82ffbcc208ed5be0e2a29a473fef456",
      "old_mode": 33188,
      "old_path": "net/netfilter/nfnetlink_acct.c",
      "new_id": "8ff1e0ad5cb0d4c8d3d61a10a464c6e6739a5e09",
      "new_mode": 33188,
      "new_path": "net/netfilter/nfnetlink_acct.c"
    },
    {
      "type": "modify",
      "old_id": "d658b1478fa0536534bef975b53d1daa0696baaa",
      "old_mode": 33188,
      "old_path": "net/netfilter/nfnetlink_cthelper.c",
      "new_id": "e5bc4a874e774443d1eb2f2fd1719849ee0dc032",
      "new_mode": 33188,
      "new_path": "net/netfilter/nfnetlink_cthelper.c"
    },
    {
      "type": "modify",
      "old_id": "531706982859089a03226848fb68800bef007b9e",
      "old_mode": 33188,
      "old_path": "net/netfilter/nfnetlink_hook.c",
      "new_id": "5623c18fcd12f09acb3b30668d18797304898a7d",
      "new_mode": 33188,
      "new_path": "net/netfilter/nfnetlink_hook.c"
    },
    {
      "type": "modify",
      "old_id": "730c2541a8498e79f7a2e84352f09462063c021f",
      "old_mode": 33188,
      "old_path": "net/netfilter/nfnetlink_log.c",
      "new_id": "e662a02f0ad03176a92a4a765eef50e01a3e127b",
      "new_mode": 33188,
      "new_path": "net/netfilter/nfnetlink_log.c"
    },
    {
      "type": "modify",
      "old_id": "c2906706c82a5b4cd6b733ecba1a1d60541c078f",
      "old_mode": 33188,
      "old_path": "net/netfilter/nfnetlink_queue.c",
      "new_id": "cf6baa45a516c624d254c01fc44763e206ed65d0",
      "new_mode": 33188,
      "new_path": "net/netfilter/nfnetlink_queue.c"
    },
    {
      "type": "modify",
      "old_id": "53a614a0e3cdf775fd9bccced40c62adfbf46f3c",
      "old_mode": 33188,
      "old_path": "net/netfilter/nft_compat.c",
      "new_id": "95dd2ce42d5008b00e74bd4056be9ffc0d553e77",
      "new_mode": 33188,
      "new_path": "net/netfilter/nft_compat.c"
    },
    {
      "type": "modify",
      "old_id": "09ac4f77e3899e26daa5185d1db4810d6d8b184f",
      "old_mode": 33188,
      "old_path": "net/netfilter/nft_connlimit.c",
      "new_id": "46b31d78abc6dbbe46c5007ff91d8e50f4d5506e",
      "new_mode": 33188,
      "new_path": "net/netfilter/nft_connlimit.c"
    },
    {
      "type": "modify",
      "old_id": "2bb3fdc87621cb62e2287723ae67f5415a98c999",
      "old_mode": 33188,
      "old_path": "net/netfilter/nft_ct.c",
      "new_id": "a8096520468d99f015d900315850ed40eb27fc6e",
      "new_mode": 33188,
      "new_path": "net/netfilter/nft_ct.c"
    },
    {
      "type": "modify",
      "old_id": "6bff6287e7d5236e21bb777d638db34afa363f4f",
      "old_mode": 33188,
      "old_path": "net/netfilter/nft_dynset.c",
      "new_id": "87e55afc14349f32468f883318f0ca4efd96f89d",
      "new_mode": 33188,
      "new_path": "net/netfilter/nft_dynset.c"
    },
    {
      "type": "modify",
      "old_id": "1602e4266f34620598f458207466da00105bc3a8",
      "old_mode": 33188,
      "old_path": "net/netfilter/nft_exthdr.c",
      "new_id": "45d3b027a02d409988f8e9432ee98e77c6d411fe",
      "new_mode": 33188,
      "new_path": "net/netfilter/nft_exthdr.c"
    },
    {
      "type": "modify",
      "old_id": "c4569d4b92285338b903b7d876efcba09238f0ca",
      "old_mode": 33188,
      "old_path": "net/netfilter/nft_inner.c",
      "new_id": "03ffb1159fc183f5aa85a149fedbe135a89b9126",
      "new_mode": 33188,
      "new_path": "net/netfilter/nft_inner.c"
    },
    {
      "type": "modify",
      "old_id": "f6830621c471c06f66af1eb767d8f0eed641ba18",
      "old_mode": 33188,
      "old_path": "net/netfilter/nft_limit.c",
      "new_id": "167d99b1447fa23e865832dea543fb19b75cb56c",
      "new_mode": 33188,
      "new_path": "net/netfilter/nft_limit.c"
    },
    {
      "type": "modify",
      "old_id": "da0c0d1c9cea2883d69293bec2074181f837791c",
      "old_mode": 33188,
      "old_path": "net/netfilter/nft_log.c",
      "new_id": "0d868eea6257d2c75f8851a2b28d139e198d7f9f",
      "new_mode": 33188,
      "new_path": "net/netfilter/nft_log.c"
    },
    {
      "type": "modify",
      "old_id": "39ccd67ed265ab53a5529292ac826ca9fbe498e3",
      "old_mode": 33188,
      "old_path": "net/netfilter/nft_osf.c",
      "new_id": "b2f44bc6bd3fccfdf73e6fdbd03dc6dc7bf48409",
      "new_mode": 33188,
      "new_path": "net/netfilter/nft_osf.c"
    },
    {
      "type": "modify",
      "old_id": "973d56af03ff2a49c0a2bbaa35a12f8ed2ba7355",
      "old_mode": 33188,
      "old_path": "net/netfilter/nft_payload.c",
      "new_id": "91b62083d9427e1a640bf1f3e5a5045673bff484",
      "new_mode": 33188,
      "new_path": "net/netfilter/nft_payload.c"
    },
    {
      "type": "modify",
      "old_id": "8eb13a02942ed3cdabd1588a0e0b1117f93e8ca5",
      "old_mode": 33188,
      "old_path": "net/netfilter/nft_queue.c",
      "new_id": "b83d209db8864e1f2474fea226169c99c30ab510",
      "new_mode": 33188,
      "new_path": "net/netfilter/nft_queue.c"
    },
    {
      "type": "modify",
      "old_id": "3be788e5223c364298a54c9f195f38aa9b26c6fe",
      "old_mode": 33188,
      "old_path": "net/netfilter/nft_quota.c",
      "new_id": "6ed7c4409706bddc5539c906a68d80fc02d02086",
      "new_mode": 33188,
      "new_path": "net/netfilter/nft_quota.c"
    },
    {
      "type": "modify",
      "old_id": "8e452a8749693f4e51aa3a31ee0ebfa8a04bb24a",
      "old_mode": 33188,
      "old_path": "net/netfilter/nft_synproxy.c",
      "new_id": "7641f249614c9728846aeaecd8eb988037c315c3",
      "new_mode": 33188,
      "new_path": "net/netfilter/nft_synproxy.c"
    },
    {
      "type": "modify",
      "old_id": "f5cadba91417ae5cf3c666398eee493ae016204b",
      "old_mode": 33188,
      "old_path": "net/netfilter/nft_tunnel.c",
      "new_id": "65d06300f48a1bdbbc029297cb466972a412c376",
      "new_mode": 33188,
      "new_path": "net/netfilter/nft_tunnel.c"
    },
    {
      "type": "modify",
      "old_id": "7ffe6a2690d13d6cfa066645da7a9ce1ba6ca0d6",
      "old_mode": 33188,
      "old_path": "net/netfilter/nft_xfrm.c",
      "new_id": "6858cd2d16a4aff73ba9e7e21b752462cc29a0ed",
      "new_mode": 33188,
      "new_path": "net/netfilter/nft_xfrm.c"
    }
  ]
}