summaryrefslogtreecommitdiff
path: root/net/ipv4/netfilter
AgeCommit message (Expand)AuthorFilesLines
2021-04-16netfilter: x_tables: fix compat match/target pad out-of-bound writeFlorian Westphal2-0/+4
2021-01-30netfilter: rpfilter: mask ecn bits before fib lookupGuillaume Nault1-1/+1
2020-06-03netfilter: nf_conntrack_pptp: prevent buffer overflows in debug codePablo Neira Ayuso1-5/+2
2020-01-23netfilter: arp_tables: init netns pointer in xt_tgdtor_param structFlorian Westphal1-9/+10
2020-01-14netfilter: arp_tables: init netns pointer in xt_tgchk_param structFlorian Westphal1-11/+16
2019-02-20netfilter: nf_tables: fix mismatch in big-endian systemLiping Zhang2-8/+8
2018-08-24netfilter: x_tables: set module owner for icmp(6) matchesFlorian Westphal1-0/+1
2018-07-17netfilter: x_tables: initialise match/target check parameter structFlorian Westphal1-0/+1
2018-04-08netfilter: nf_nat_h323: fix logical-not-parentheses warningNick Desaulniers1-27/+30
2018-03-18netfilter: x_tables: pack percpu counter allocationsFlorian Westphal2-6/+12
2018-03-18netfilter: x_tables: pass xt_counters struct to counter allocatorFlorian Westphal2-8/+2
2018-03-18netfilter: x_tables: pass xt_counters struct instead of packet counterFlorian Westphal2-4/+4
2018-03-18netfilter: add back stackpointer size checksFlorian Westphal2-1/+10
2018-02-25netfilter: on sockopt() acquire sock lock only in the required scopePaolo Abeni1-1/+5
2018-02-25netfilter: ipt_CLUSTERIP: fix out-of-bounds accesses in clusterip_tg_check()Dmitry Vyukov1-3/+13
2017-12-25netfilter: nf_nat_snmp: Fix panic when snmp_trap_helper fails to registerGao Feng1-18/+1
2017-12-14netfilter: don't track fragmented packetsFlorian Westphal2-5/+4
2017-10-08netfilter: invoke synchronize_rcu after set the _hook_ to NULLLiping Zhang1-0/+1
2017-08-11netfilter: use fwmark_reflect in nf_send_resetPau Espin Pedrol1-0/+2
2016-11-30netfilter: arp_tables: fix invoking 32bit "iptable -P INPUT ACCEPT" failed in...Hongxu Jia1-2/+2
2016-10-31netfilter: nft_dup: do not use sreg_dev if the user doesn't specify itLiping Zhang1-2/+4
2016-09-25Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/...Pablo Neira Ayuso2-4/+8
2016-09-25netfilter: nf_log: get rid of XT_LOG_* macrosLiping Zhang1-3/+3
2016-09-25netfilter: nft_log: complete NFTA_LOG_FLAGS attr supportLiping Zhang3-4/+4
2016-09-24netfilter: Remove explicit rcu_read_lock in nf_hook_slowAaron Conole2-2/+2
2016-09-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-4/+7
2016-09-12Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+1
2016-09-12netfilter: Add the missed return value check of nft_register_chain_typeGao Feng2-2/+8
2016-09-12netfilter: nf_tables: ensure proper initialization of nft_pktinfo fieldsPablo Neira Ayuso1-1/+1
2016-09-07netfilter: gre: Use consistent GRE and PTTP header structure instead of the o...Gao Feng1-6/+7
2016-09-07netfilter: gre: Use consistent GRE_* macros instead of ones defined by netfil...Gao Feng1-2/+2
2016-09-06netfilter: nft_chain_route: re-route before skb is queued to userspaceLiping Zhang1-4/+7
2016-08-30netfilter: log: Check param to avoid overflow in nf_log_setGao Feng2-4/+2
2016-08-30netfilter: log_arp: Use ARPHRD_ETHER instead of literal '1'Gao Feng1-1/+1
2016-08-25netfilter: nft_reject: restrict to INPUT/FORWARD/OUTPUTLiping Zhang1-0/+1
2016-08-13netfilter: remove ip_conntrack* sysctl compat codePablo Neira Ayuso5-615/+1
2016-08-12netfilter: use_nf_conn_expires helper in more placesFlorian Westphal1-2/+1
2016-08-12netfilter: nf_dup4: remove redundant checksum recalculationLiping Zhang1-6/+4
2016-07-18netfilter: x_tables: speed up jump target validationFlorian Westphal2-43/+49
2016-07-11netfilter: conntrack: fix race between nf_conntrack proc read and hash resizeLiping Zhang1-4/+10
2016-07-03netfilter: Convert FWINV<[foo]> macros and uses to NF_INVFJoe Perches2-32/+29
2016-07-01netfilter: x_tables: simplify ip{6}table_mangle_hook()Pablo Neira Ayuso1-4/+0
2016-06-24netfilter: nf_reject_ipv4: don't send tcp RST if the packet is non-TCPLiping Zhang1-0/+3
2016-05-06netfilter: conntrack: use a single expectation table for all namespacesFlorian Westphal1-4/+2
2016-05-06netfilter: conntrack: check netns when walking expect hashFlorian Westphal1-0/+3
2016-05-05netfilter: x_tables: get rid of old and inconsistent debuggingPablo Neira Ayuso2-385/+76
2016-05-05netfilter: conntrack: use a single hashtable for all namespacesFlorian Westphal2-7/+5
2016-05-05netfilter: conntrack: check netns when comparing conntrack objectsFlorian Westphal1-2/+6
2016-05-05netfilter: conntrack: small refactoring of conntrack seq_printfFlorian Westphal1-5/+19
2016-04-29netfilter: fix IS_ERR_VALUE usagePablo Neira Ayuso2-4/+8
generated by cgit v1.2.3 (git 2.25.1) at 2026-05-18 02:35:46 +0000