summaryrefslogtreecommitdiff
path: root/net/ipv4/netfilter
AgeCommit message (Expand)AuthorFilesLines
2021-04-16netfilter: x_tables: fix compat match/target pad out-of-bound writeFlorian Westphal2-0/+4
2021-01-30netfilter: rpfilter: mask ecn bits before fib lookupGuillaume Nault1-1/+1
2020-06-03netfilter: nf_conntrack_pptp: prevent buffer overflows in debug codePablo Neira Ayuso1-5/+2
2020-05-10netfilter: nft_dup: do not use sreg_dev if the user doesn't specify itLiping Zhang1-2/+4
2020-01-14netfilter: arp_tables: init netns pointer in xt_tgchk_param structFlorian Westphal1-11/+16
2019-03-23netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_EN...Pablo Neira Ayuso2-0/+4
2018-08-24netfilter: x_tables: set module owner for icmp(6) matchesFlorian Westphal1-0/+1
2018-07-17netfilter: x_tables: initialise match/target check parameter structFlorian Westphal1-0/+1
2018-04-08netfilter: nf_nat_h323: fix logical-not-parentheses warningNick Desaulniers1-27/+30
2018-03-18netfilter: x_tables: pack percpu counter allocationsFlorian Westphal2-6/+12
2018-03-18netfilter: x_tables: pass xt_counters struct to counter allocatorFlorian Westphal2-8/+2
2018-03-18netfilter: x_tables: pass xt_counters struct instead of packet counterFlorian Westphal2-4/+4
2018-03-18netfilter: add back stackpointer size checksFlorian Westphal2-0/+8
2018-02-25netfilter: on sockopt() acquire sock lock only in the required scopePaolo Abeni1-1/+5
2018-02-25netfilter: ipt_CLUSTERIP: fix out-of-bounds accesses in clusterip_tg_check()Dmitry Vyukov1-3/+13
2018-01-31netfilter: fix IS_ERR_VALUE usagePablo Neira Ayuso2-4/+8
2018-01-31netfilter: use fwmark_reflect in nf_send_resetPau Espin Pedrol1-0/+2
2018-01-31netfilter: arp_tables: fix invoking 32bit "iptable -P INPUT ACCEPT" failed in...Hongxu Jia1-2/+2
2018-01-31netfilter: x_tables: speed up jump target validationFlorian Westphal2-43/+49
2017-12-25netfilter: nf_nat_snmp: Fix panic when snmp_trap_helper fails to registerGao Feng1-18/+1
2017-12-16netfilter: don't track fragmented packetsFlorian Westphal2-5/+4
2017-10-08netfilter: invoke synchronize_rcu after set the _hook_ to NULLLiping Zhang1-0/+1
2016-06-24netfilter: x_tables: introduce and use xt_copy_counters_from_userFlorian Westphal2-86/+10
2016-06-24netfilter: x_tables: do compat validation via translate_tableFlorian Westphal2-217/+52
2016-06-24netfilter: x_tables: xt_compat_match_from_user doesn't need a retvalFlorian Westphal2-29/+14
2016-06-24netfilter: ip_tables: simplify translate_compat_table argsFlorian Westphal1-35/+24
2016-06-24netfilter: arp_tables: simplify translate_compat_table argsFlorian Westphal1-46/+36
2016-06-24netfilter: x_tables: check for bogus target offsetFlorian Westphal2-4/+6
2016-06-24netfilter: x_tables: add compat version of xt_check_entry_offsetsFlorian Westphal2-2/+4
2016-06-24netfilter: x_tables: kill check_entry helperFlorian Westphal2-23/+16
2016-06-24netfilter: x_tables: add and use xt_check_entry_offsetsFlorian Westphal2-21/+2
2016-06-24netfilter: x_tables: validate targets of jumpsFlorian Westphal2-0/+32
2016-06-24netfilter: x_tables: don't move to non-existent next ruleFlorian Westphal2-3/+9
2016-06-24netfilter: x_tables: fix unconditional helperFlorian Westphal2-21/+20
2016-06-24netfilter: x_tables: make sure e->next_offset covers remaining blob sizeFlorian Westphal2-4/+8
2016-06-24netfilter: x_tables: validate e->target_offset earlyFlorian Westphal2-18/+16
2016-04-20ipv4: Don't do expensive useless work during inetdev destroy.David S. Miller1-2/+10
2016-03-03inet: frag: Always orphan skbs inside ip_defrag()Joe Stringer1-2/+0
2015-12-10netfilter: nf_dup: add missing dependencies with NF_CONNTRACKPablo Neira Ayuso1-0/+1
2015-11-09netfilter: Fix removal of GRE expectation entries created by PPTPAnthony Lineham1-1/+1
2015-11-05ipv4: use sk_fullsock() in ipv4_conntrack_defrag()Eric Dumazet1-3/+2
2015-10-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2-3/+2
2015-10-17Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/...Pablo Neira Ayuso4-6/+7
2015-10-16netfilter: ipv4: whitespace around operatorsIan Morris3-6/+6
2015-10-16netfilter: ipv4: code indentationIan Morris3-5/+5
2015-10-16netfilter: ipv4: function definition layoutIan Morris2-6/+6
2015-10-16netfilter: ipv4: ternary operator layoutIan Morris2-5/+5
2015-10-16netfilter: ipv4: label placementIan Morris2-2/+2
2015-10-16netfilter: remove hook owner refcountingFlorian Westphal4-14/+0
2015-10-12ipv4: Pass struct net into ip_defrag and ip_check_defragEric W. Biederman1-3/+4
generated by cgit v1.2.3 (git 2.25.1) at 2026-05-18 09:45:28 +0000