summaryrefslogtreecommitdiff
path: root/net/ipv4/netfilter
AgeCommit message (Expand)AuthorFilesLines
2022-10-26netfilter: nft_fib: Fix for rpath check with VRF devicesPhil Sutter1-0/+3
2021-04-16netfilter: x_tables: fix compat match/target pad out-of-bound writeFlorian Westphal2-0/+4
2021-01-30netfilter: rpfilter: mask ecn bits before fib lookupGuillaume Nault1-1/+1
2020-06-03netfilter: nf_conntrack_pptp: prevent buffer overflows in debug codePablo Neira Ayuso1-5/+2
2020-01-23netfilter: arp_tables: init netns pointer in xt_tgdtor_param structFlorian Westphal1-9/+10
2020-01-14netfilter: arp_tables: init netns pointer in xt_tgchk_param structFlorian Westphal1-11/+16
2019-11-20netfilter: masquerade: don't flush all conntracks if only one address deleted...Tan Hu1-3/+19
2019-08-16netfilter: Fix rpfilter dropping vrf packets by mistakeMiaohe Lin1-0/+1
2019-01-26netfilter: ipt_CLUSTERIP: check MAC address when duplicate config is setTaehee Yoo1-1/+2
2018-08-24netfilter: x_tables: set module owner for icmp(6) matchesFlorian Westphal1-0/+1
2018-07-17netfilter: x_tables: initialise match/target check parameter structFlorian Westphal1-0/+1
2018-05-30netfilter: ipt_CLUSTERIP: put config instead of freeing itFlorian Westphal1-3/+4
2018-05-30netfilter: ipt_CLUSTERIP: put config struct if we can't increment ct refcountFlorian Westphal1-2/+6
2018-05-22netfilter: nf_socket: Fix out of bounds access in nf_sk_lookup_slow_v{4,6}Subash Abhinov Kasiviswanathan1-2/+4
2018-04-26netfilter: compat: prepare xt_compat_init_offsets to return errorsFlorian Westphal2-5/+13
2018-04-26netfilter: x_tables: add counters allocation wrapperFlorian Westphal2-2/+2
2018-04-08netfilter: drop template ct when conntrack is skipped.Paolo Abeni1-1/+13
2018-03-15netfilter: ipt_CLUSTERIP: fix a race condition of proc file creationCong Wang1-6/+6
2018-03-15netfilter: add back stackpointer size checksFlorian Westphal2-1/+10
2018-02-25netfilter: on sockopt() acquire sock lock only in the required scopePaolo Abeni1-1/+5
2018-02-25netfilter: ipt_CLUSTERIP: fix out-of-bounds accesses in clusterip_tg_check()Dmitry Vyukov1-3/+13
2017-11-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netLinus Torvalds1-0/+2
2017-11-02License cleanup: add SPDX GPL-2.0 license identifier to files with no licenseGreg Kroah-Hartman1-0/+1
2017-11-01netfilter: nf_reject_ipv4: Fix use-after-free in send_resetTejaswi Tanikella1-0/+2
2017-10-09netfilter: SYNPROXY: skip non-tcp packet in {ipv4, ipv6}_synproxy_hookLin Zhang1-1/+2
2017-09-08netfilter: xtables: add scheduling opportunity in get_countersFlorian Westphal2-0/+2
2017-09-04net: Remove CONFIG_NETFILTER_DEBUG and _ASSERT() macros.Varsha Rao1-9/+3
2017-09-04net: Replace NF_CT_ASSERT() with WARN_ON().Varsha Rao3-8/+8
2017-09-04netfilter: remove unused hooknum arg from packet functionsFlorian Westphal1-1/+0
2017-09-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller12-84/+63
2017-08-24netfilter: conntrack: place print_tuple in procfs partFlorian Westphal2-19/+0
2017-08-24netfilter: conntrack: remove protocol name from l4proto structFlorian Westphal1-1/+0
2017-08-24netfilter: conntrack: remove protocol name from l3proto structFlorian Westphal1-1/+0
2017-08-24netfilter: conntrack: compute l3proto nla size at compile timeFlorian Westphal1-6/+7
2017-08-24netfilter: nf_nat_h323: fix logical-not-parentheses warningNick Desaulniers1-27/+30
2017-08-02netfilter: constify nf_loginfo structuresJulia Lawall3-3/+3
2017-08-02netfilter: xtables: Remove unused variable in compat_copy_entry_from_user()Taehee Yoo2-4/+0
2017-07-31netfilter: conntrack: do not enable connection tracking unless neededFlorian Westphal1-14/+2
2017-07-31netfilter: x_tables: Fix use-after-free in ipt_do_table.Taehee Yoo2-9/+10
2017-07-31netfilter: nf_hook_ops structs can be constFlorian Westphal5-5/+5
2017-07-31netfilter: nf_tables: fib: use skb_header_pointerPablo M. Bermudo Garay1-4/+16
2017-07-19netfilter: ipt_CLUSTERIP: fix use-after-free of proc entrySabrina Dubroca1-1/+3
2017-07-17netfilter: nf_tables: only allow in/output for arp packetsFlorian Westphal1-2/+1
2017-06-30Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2-37/+82
2017-06-19netfilter: ipt_CLUSTERIP: do not hold devXin Long1-28/+73
2017-06-16networking: make skb_put & friends return void pointersJohannes Berg2-6/+6
2017-06-16networking: convert many more places to skb_put_zero()Johannes Berg1-2/+1
2017-05-29netfilter: conntrack: rename nf_ct_iterate_cleanupFlorian Westphal1-2/+2
2017-05-29netfilter: ipt_CLUSTERIP: switch to nf_register_net_hookFlorian Westphal1-7/+7
2017-05-19sk_buff: remove support for csum_bad in sk_buffDavide Caratti1-1/+1