summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2024-09-04netfilter: nft_counter: Synchronize nft_counter_reset() against reader.Sebastian Andrzej Siewior1-0/+5
2024-08-19netfilter: nf_tables: prefer nft_chain_validateFlorian Westphal1-101/+13
2024-08-19netfilter: nf_tables: use timestamp to check for set element timeoutPablo Neira Ayuso3-3/+12
2024-08-19netfilter: nf_tables: set element extended ACK reporting supportPablo Neira Ayuso1-4/+9
2024-08-19netfilter: ctnetlink: use helper function to calculate expect IDPablo Neira Ayuso1-1/+2
2024-08-19ipvs: Avoid unnecessary calls to skb_is_gso_sctpIsmael Luceno1-2/+2
2024-07-05netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registersPablo Neira Ayuso2-5/+6
2024-07-05netfilter: nf_tables: validate family when identifying table via handlePablo Neira Ayuso1-2/+3
2024-06-16netfilter: nf_tables: discard table flag update with pending basechain deletionPablo Neira Ayuso1-1/+19
2024-06-16netfilter: nf_tables: reject new basechain after table flag updatePablo Neira Ayuso1-0/+3
2024-06-16netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeoutPablo Neira Ayuso1-0/+1
2024-06-16netfilter: nf_tables: do not compare internal table flags on updatesPablo Neira Ayuso1-1/+1
2024-06-16netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()Ignat Korchagin1-0/+20
2024-06-16netfilter: nf_tables: set dormant flag on hook register failureFlorian Westphal1-0/+1
2024-06-16netfilter: nft_set_rbtree: skip end interval element from gcPablo Neira Ayuso1-4/+3
2024-06-16netfilter: nf_tables: validate NFPROTO_* familyPablo Neira Ayuso6-0/+37
2024-06-16netfilter: nf_tables: skip dead set elements in netlink dumpPablo Neira Ayuso1-1/+1
2024-06-16netfilter: nf_tables: mark newset as dead on transaction abortFlorian Westphal1-0/+1
2024-06-16netfilter: nft_dynset: relax superfluous check on set updatesPablo Neira Ayuso1-9/+1
2024-06-16netfilter: nft_dynset: report EOPNOTSUPP on missing set featurePablo Neira Ayuso1-3/+3
2024-06-16netfilter: nftables: exthdr: fix 4-byte stack OOB writeFlorian Westphal1-3/+11
2024-06-16netfilter: nft_dynset: fix timeouts later than 23 daysPablo Neira Ayuso2-5/+7
2024-06-16netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush (for 4.19)Pablo Neira Ayuso1-0/+3
2024-06-16netfilter: nf_tables: disable toggling dormant table state more than oncePablo Neira Ayuso1-0/+4
2024-06-16netfilter: nf_tables: fix table flag updatesPablo Neira Ayuso1-19/+40
2024-06-16netfilter: nftables: update table flags from the commit phasePablo Neira Ayuso1-15/+16
2024-06-16netfilter: nf_tables: double hook unregistration in netns pathPablo Neira Ayuso2-7/+30
2024-06-16netfilter: nf_tables: unregister flowtable hooks on netns exitPablo Neira Ayuso1-0/+2
2024-06-16netfilter: nf_tables: fix memleak when more than 255 elements expiredPablo Neira Ayuso1-2/+8
2024-06-16netfilter: nft_set_hash: try later when GC hits EAGAIN on iterationPablo Neira Ayuso1-6/+3
2024-06-16netfilter: nft_set_rbtree: use read spinlock to avoid datapath contentionPablo Neira Ayuso1-4/+2
2024-06-16netfilter: nft_set_rbtree: skip sync GC for new elements in this transactionPablo Neira Ayuso1-2/+6
2024-06-16netfilter: nf_tables: defer gc run if previous batch is still pendingFlorian Westphal2-0/+6
2024-06-16netfilter: nf_tables: GC transaction race with abort pathPablo Neira Ayuso1-1/+6
2024-06-16netfilter: nf_tables: GC transaction race with netns dismantlePablo Neira Ayuso1-1/+6
2024-06-16netfilter: nf_tables: fix GC transaction races with netns and netlink event e...Pablo Neira Ayuso1-4/+26
2024-06-16netfilter: nf_tables: remove busy mark and gc batch APIPablo Neira Ayuso1-26/+2
2024-06-16netfilter: nf_tables: adapt set backend to use GC transaction APIPablo Neira Ayuso2-81/+143
2024-06-16netfilter: nf_tables: GC transaction API to avoid race with control planePablo Neira Ayuso1-9/+216
2024-06-16netfilter: nf_tables: don't skip expired elements during walkPablo Neira Ayuso3-4/+4
2024-06-16netfilter: nft_set_rbtree: fix overlap expiration walkPablo Neira Ayuso1-6/+14
2024-06-16netfilter: nft_set_rbtree: fix null deref on element insertionPablo Neira Ayuso1-7/+13
2024-06-16netfilter: nft_set_rbtree: Switch to node list walk for overlap detectionPablo Neira Ayuso1-25/+198
2024-06-16netfilter: nft_set_rbtree: Add missing expired checksPhil Sutter1-0/+11
2024-06-16netfilter: nft_set_rbtree: allow loose matching of closing element in intervalPablo Neira Ayuso1-2/+8
2024-06-16netfilter: nf_tables: drop map element references from preparation phasePablo Neira Ayuso4-18/+104
2024-06-16netfilter: nftables: rename set element data activation/deactivation functionsPablo Neira Ayuso1-11/+11
2024-06-16netfilter: nf_tables: pass context to nft_set_destroy()Pablo Neira Ayuso1-5/+5
2024-06-16netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()Eric Dumazet1-0/+2
2024-05-02ipvs: Fix checksumming on GSO of SCTP packetsIsmael Luceno1-2/+4