)]}'
{
  "commit": "208d6e1a64e623b491a290b6a8ecc563f2b99dde",
  "tree": "a2423b93021c8d3c79db282128168e08081ac00f",
  "parents": [
    "7e393d0bd0f5a0786fd68fb7324b58060958317b"
  ],
  "author": {
    "name": "Florian Westphal",
    "email": "fw@strlen.de",
    "time": "Thu Jun 24 12:36:42 2021 +0200"
  },
  "committer": {
    "name": "COS Cherry Picker",
    "email": "cloud-image-release@prod.google.com",
    "time": "Thu Jan 26 13:58:16 2023 -0800"
  },
  "message": "netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state\n\n[ Upstream commit e15d4cdf27cb0c1e977270270b2cea12e0955edd ]\n\nConsider:\n  client -----\u003e conntrack ---\u003e Host\n\nclient sends a SYN, but $Host is unreachable/silent.\nClient eventually gives up and the conntrack entry will time out.\n\nHowever, if the client is restarted with same addr/port pair, it\nmay prevent the conntrack entry from timing out.\n\nThis is noticeable when the existing conntrack entry has no NAT\ntransformation or an outdated one and port reuse happens either\non client or due to a NAT middlebox.\n\nThis change prevents refresh of the timeout for SYN retransmits,\nso entry is going away after nf_conntrack_tcp_timeout_syn_sent\nseconds (default: 60).\n\nEntry will be re-created on next connection attempt, but then\nnat rules will be evaluated again.\n\nBUG\u003db/253760716\nTEST\u003dpresubmit\nRELEASE_NOTE\u003dNone\n\ncos-patch: bug\nChange-Id: Id74f74a39f4fc5bfb23b16bd4e78108de4bf5d8a\nSigned-off-by: Florian Westphal \u003cfw@strlen.de\u003e\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/41428\nReviewed-by: Oleksandr Tymoshenko \u003covt@google.com\u003e\nTested-by: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\nReviewed-by: Meena Shanmugam \u003cmeenashanmugam@google.com\u003e\nMain-Branch-Verified: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "3f785bdfa942d7149bf65573ca17c3fe3ce2164a",
      "old_mode": 33188,
      "old_path": "net/netfilter/nf_conntrack_proto_tcp.c",
      "new_id": "c1d02c0b4f0058a32ac8715af27f7f91cc2f2cca",
      "new_mode": 33188,
      "new_path": "net/netfilter/nf_conntrack_proto_tcp.c"
    }
  ]
}