Re: [PATCH net v2] net/sched: act_gact, act_police: range check the fallback control action

From: patchwork-bot+netdevbpf

Date: Mon Aug 10 2026 - 19:21:14 EST


Hello:

This patch was applied to netdev/net.git (main)
by Jakub Kicinski <kuba@xxxxxxxxxx>:

On Thu, 6 Aug 2026 19:12:52 +0900 you wrote:
> tcf_action_check_ctrlact() range checks the primary control action:
>
> if (!opcode)
> ret = action > TC_ACT_VALUE_MAX ? -EINVAL : 0;
>
> TC_ACT_VALUE_MAX is TC_ACT_TRAP, so kernel-internal verdicts above it
> cannot be set that way. But act_gact and act_police each carry a second,
> independent control action supplied by user space that never reaches that
> helper - TCA_GACT_PROB.paction and TCA_POLICE_RESULT. Both only reject
> TC_ACT_GOTO_CHAIN, so any other value is stored verbatim and returned
> verbatim from the action.
>
> [...]

Here is the summary with links:
- [net,v2] net/sched: act_gact, act_police: range check the fallback control action
https://git.kernel.org/netdev/net/c/883b56ae58fe

You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html