]> git.hungrycats.org Git - linux/commit
netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths
authorFernando Fernandez Mancera <fmancera@suse.de>
Mon, 1 Jun 2026 19:30:42 +0000 (21:30 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Sun, 14 Jun 2026 10:50:01 +0000 (12:50 +0200)
commit42eb1ca711b6f3c0cc09d872ff49fa7aa17a56e1
tree435cc0dceabcaf0c9266387893bec0538929b8f9
parent30877f3da910980cb41f3039fc7a68dc157b2cd7
netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths

Replace raw warning macros with DEBUG_NET_WARN_ON_ONCE across the
nf_tables API, core engine, and expression evaluations. This prevents
unnecessary system panics when panic_on_warn=1 is enabled in production
systems.

Signed-off-by: Fernando Fernandez Mancera <fmancera@suse.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
22 files changed:
net/netfilter/nf_tables_api.c
net/netfilter/nf_tables_core.c
net/netfilter/nf_tables_offload.c
net/netfilter/nf_tables_trace.c
net/netfilter/nft_ct.c
net/netfilter/nft_ct_fast.c
net/netfilter/nft_exthdr.c
net/netfilter/nft_fib.c
net/netfilter/nft_inner.c
net/netfilter/nft_lookup.c
net/netfilter/nft_masq.c
net/netfilter/nft_meta.c
net/netfilter/nft_payload.c
net/netfilter/nft_redir.c
net/netfilter/nft_reject.c
net/netfilter/nft_rt.c
net/netfilter/nft_set_hash.c
net/netfilter/nft_set_pipapo.c
net/netfilter/nft_set_rbtree.c
net/netfilter/nft_socket.c
net/netfilter/nft_tunnel.c
net/netfilter/nft_xfrm.c