> Convert the sites that pull and do version and ihl checks on the ipv4 > header and validate the packet transport offset to use ip4_parse. > > Sites that validate a read-only copy instead of pulling - the nft > and nft_inner header_pointer validators, ip_check_defrag()'s > skb_copy_bits, the flow dissector - stay open-coded for now. > > Signed-off-by: Michael S. Tsirkin <[email protected]>
Sashiko has reviewed this patch and found no issues. It looks great! -- Sashiko AI review ยท https://sashiko.dev/#/patchset/[email protected]?part=2
