netfilter: tproxy: use DEBUG_NET_WARN_ON_ONCE for protocol fallbacks

Browse source

Replace WARN_ON calls with DEBUG_NET_WARN_ON_ONCE in the default switch
blocks of nf_tproxy_get_sock_v4 and v6. Unsupported transport protocols
are already safely handled by returning a NULL socket pointer. This
prevents unnecessary system panics when panic_on_warn=1 is enabled in
production systems.

Link: https://patch.msgid.link/cover.1786968834.git.zhilinz@nebusec.ai/
Signed-off-by: Fernando Fernandez Mancera <fmancera@suse.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Fernando Fernandez Mancera 2026-06-01 21:30:46 +02:00 • committed by Pablo Neira Ayuso

parent 746fc0787f

commit 1f0391aea8

2 changed files with 2 additions and 2 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

2

net/ipv4/netfilter/nf_tproxy_ipv4.c

View file

2

net/ipv6/netfilter/nf_tproxy_ipv6.c

View file