patch 'net/ice: reject unsupported flow item range' has been queued to stable release 24.11.7

[luca.boccassi at gmail.com]

Hi,

FYI, your patch has been queued to stable release 24.11.7

Note it hasn't been pushed to http://dpdk.org/browse/dpdk-stable yet.
It will be pushed if I get no objections before 07/22/26. So please
shout if anyone has objections.

Also note that after the patch there's a diff of the upstream commit vs the
patch applied to the branch. This will indicate if there was any rebasing
needed to apply to the stable branch. If there were code changes for rebasing
(ie: not only metadata diffs), please double check that the rebase was
correctly done.

Queued patches are on a temporary branch at:
https://github.com/bluca/dpdk-stable

This queued commit can be viewed at:
https://github.com/bluca/dpdk-stable/commit/124d22905677f97228b9bc06036404602c2d0d75

Thanks.

Luca Boccassi

---
>From 124d22905677f97228b9bc06036404602c2d0d75 Mon Sep 17 00:00:00 2001
From: Sandeep Penigalapati <sandeep.penigalapati at intel.com>
Date: Sat, 11 Jul 2026 23:26:47 -0400
Subject: [PATCH] net/ice: reject unsupported flow item range

[ upstream commit 8aaeb5aae4fbfac99c910df18c2f35b38cc20ac2 ]

In ice_fdir_parse_pattern(), a flow item that specifies a 'last'
member (a range) is only allowed for IPV4 and IPV6_FRAG_EXT item
types.  For other item types the code set an rte_flow error but did
not return, so parsing continued from an inconsistent state.

Add the missing return so an unsupported range aborts parsing.

Fixes: b7e8781de768 ("net/ice: support flow director for IP fragment packet")

Signed-off-by: Sandeep Penigalapati <sandeep.penigalapati at intel.com>
Acked-by: Bruce Richardson <bruce.richardson at intel.com>
---
 drivers/net/ice/ice_fdir_filter.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/drivers/net/ice/ice_fdir_filter.c b/drivers/net/ice/ice_fdir_filter.c
index 6113e44f5f..d6e6bd2d5d 100644
--- a/drivers/net/ice/ice_fdir_filter.c
+++ b/drivers/net/ice/ice_fdir_filter.c
@@ -1838,6 +1838,7 @@ ice_fdir_parse_pattern(__rte_unused struct ice_adapter *ad,
 			rte_flow_error_set(error, EINVAL,
 					   RTE_FLOW_ERROR_TYPE_ITEM, item,
 					   "Not support range");
+			return -rte_errno;
 		}
 
 		input_set = (tunnel_type && !is_outer) ?
-- 
2.47.3

---
  Diff of the applied patch vs upstream commit (please double-check if non-empty:
---
--- -	2026-07-20 18:03:26.182637283 +0100
+++ 0018-net-ice-reject-unsupported-flow-item-range.patch	2026-07-20 18:03:25.516443432 +0100
@@ -1 +1 @@
-From 8aaeb5aae4fbfac99c910df18c2f35b38cc20ac2 Mon Sep 17 00:00:00 2001
+From 124d22905677f97228b9bc06036404602c2d0d75 Mon Sep 17 00:00:00 2001
@@ -5,0 +6,2 @@
+[ upstream commit 8aaeb5aae4fbfac99c910df18c2f35b38cc20ac2 ]
+
@@ -14 +15,0 @@
-Cc: stable at dpdk.org
@@ -19 +20 @@
- drivers/net/intel/ice/ice_fdir_filter.c | 1 +
+ drivers/net/ice/ice_fdir_filter.c | 1 +
@@ -22,5 +23,5 @@
-diff --git a/drivers/net/intel/ice/ice_fdir_filter.c b/drivers/net/intel/ice/ice_fdir_filter.c
-index fc848a33db..d7ddd32f90 100644
---- a/drivers/net/intel/ice/ice_fdir_filter.c
-+++ b/drivers/net/intel/ice/ice_fdir_filter.c
-@@ -1929,6 +1929,7 @@ ice_fdir_parse_pattern(__rte_unused struct ice_adapter *ad,
+diff --git a/drivers/net/ice/ice_fdir_filter.c b/drivers/net/ice/ice_fdir_filter.c
+index 6113e44f5f..d6e6bd2d5d 100644
+--- a/drivers/net/ice/ice_fdir_filter.c
++++ b/drivers/net/ice/ice_fdir_filter.c
+@@ -1838,6 +1838,7 @@ ice_fdir_parse_pattern(__rte_unused struct ice_adapter *ad,