)]}'
{
  "commit": "af521b069484c83e8c1c0c4ce25eb6cefff7fdd2",
  "tree": "14b65658318e8b5ca06ad0d7cf5dcaa74b3e3acc",
  "parents": [
    "812bef82406ce61668086ae0d1b102e9878b5542"
  ],
  "author": {
    "name": "Florian Westphal",
    "email": "fw@strlen.de",
    "time": "Mon Apr 13 23:43:59 2026 +0200"
  },
  "committer": {
    "name": "Florian Westphal",
    "email": "fw@strlen.de",
    "time": "Fri Apr 17 08:26:33 2026 +0200"
  },
  "message": "netfilter: nf_conntrack_sip: don\u0027t use strtoul_simple\n\nProbably \u0027safe\u0027 because struct shinfo is stored at end of linear data area\nand simple_strotul bails out on first character thats not a number.\n\nPrefer a stricter version instead.  There are intentional changes:\n\n- Bail out if number is \u003e UINT_MAX and indicate a failure.\n  We don\u0027t expect huge values here.\n\n- Bail out if we get more characters than expected, we don\u0027t expect\n  something like \u0027expires\u003d9999999999999999999999999999999999\u0027.\n\n- In ct_sip_parse_numerical_param() base 10 is enforced. This is used\n  to fetch \u0027expire\u003d\u0027 and \u0027rports\u003d\u0027; both are expected to be base-10 values.\n\n- In nf_nat_sip.c, only accept the parsed value if its within the 1k-64k\n  range.\n\nSigned-off-by: Florian Westphal \u003cfw@strlen.de\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "76e2dcaf589e8a5702ca063bce77fb4cbe292b8e",
      "old_mode": 33188,
      "old_path": "net/netfilter/nf_conntrack_sip.c",
      "new_id": "f16c66a468dfe00feaf7170baf56f995c9c6ac8b",
      "new_mode": 33188,
      "new_path": "net/netfilter/nf_conntrack_sip.c"
    },
    {
      "type": "modify",
      "old_id": "c845b6d1a2bdf463b5c82b6b48126504ae534f8b",
      "old_mode": 33188,
      "old_path": "net/netfilter/nf_nat_sip.c",
      "new_id": "9fbfc6bff0c2218aabcabf79b3891575e6bdda9b",
      "new_mode": 33188,
      "new_path": "net/netfilter/nf_nat_sip.c"
    }
  ]
}