summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2020-01-12netfilter: nf_tables: validate NFT_DATA_VALUE after nft_data_init()Pablo Neira Ayuso4-3/+21
2020-01-12netfilter: nf_tables: validate NFT_SET_ELEM_INTERVAL_ENDPablo Neira Ayuso1-3/+9
2020-01-12netfilter: nft_set_rbtree: bogus lookup/get on consecutive elements in named ...Pablo Neira Ayuso1-5/+16
2020-01-12netfilter: ctnetlink: netns exit must wait for callbacksFlorian Westphal1-0/+3
2020-01-09netfilter: nft_tproxy: Fix port selector on Big EndianPhil Sutter1-2/+2
2020-01-04net: add bool confirm_neigh parameter for dst_ops.update_pmtuHangbin Liu1-1/+1
2020-01-04netfilter: nf_queue: enqueue skbs with NULL dstMarco Oliverio1-1/+1
2019-12-13netfilter: nf_tables: don't use position attribute on rule replacementFlorian Westphal1-10/+7
2019-12-05netfilter: nf_tables: fix a missing check of nla_put_failureKangjie Lu1-0/+2
2019-12-05netfilter: nf_nat_sip: fix RTP/RTCP source port translationsAlin Nastac1-4/+35
2019-11-24netfilter: nft_compat: do not dump private areaPablo Neira Ayuso1-2/+22
2019-11-20netfilter: nf_tables: avoid BUG_ON usageFlorian Westphal3-7/+14
2019-11-12netfilter: ipset: Copy the right MAC address in hash:ip,mac IPv6 setsStefano Brivio1-1/+1
2019-11-12ipvs: move old_secure_tcp into struct netns_ipvsEric Dumazet1-8/+7
2019-11-12ipvs: don't ignore errors in case refcounting ip_vs module failsDavide Caratti5-17/+28
2019-11-12netfilter: nf_flow_table: set timeout before insertion into hashesPablo Neira Ayuso1-1/+2
2019-11-12netfilter: ipset: Fix an error code in ip_set_sockfn_get()Dan Carpenter1-3/+5
2019-11-06netfilter: ipset: Make invalid MAC address checks consistentStefano Brivio2-7/+7
2019-10-29netfilter: nft_connlimit: disable bh on garbage collectionPablo Neira Ayuso1-1/+6
2019-10-11netfilter: nf_tables: allow lookups in dynamic setsFlorian Westphal2-5/+5
2019-10-01netfilter: nft_socket: fix erroneous socket assignmentFernando Fernandez Mancera1-3/+3
2019-09-21netfilter: nf_conntrack_ftp: Fix debug outputThomas Jarosch1-1/+1
2019-09-21netfilter: xt_physdev: Fix spurious error message in physdev_mt_checkTodd Seidelmann1-4/+2
2019-09-21netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_infoJuliana Rodrigueiro1-11/+25
2019-09-21netfilter: nft_flow_offload: missing netlink attribute policyPablo Neira Ayuso1-0/+6
2019-09-21netfilter: nf_flow_table: set default timeout after successful insertionPablo Neira Ayuso1-1/+1
2019-09-10netfilter: nft_flow_offload: skip tcp rst and fin packetsPablo Neira Ayuso1-3/+6
2019-09-10netfilter: nf_tables: use-after-free in failing rule with bound setPablo Neira Ayuso1-5/+10
2019-08-29netfilter: ipset: Fix rename concurrency with listingJozsef Kadlecsik1-1/+1
2019-08-29netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and hash:ip,mac...Stefano Brivio2-2/+2
2019-08-29netfilter: ipset: Actually allow destination MAC address for hash:ip,mac sets...Stefano Brivio1-4/+0
2019-08-25netfilter: conntrack: Use consistent ct id hash calculationDirk Morris1-8/+8
2019-08-16netfilter: nft_hash: fix symhash with modulus oneLaura Garcia Liebana1-1/+1
2019-08-16netfilter: conntrack: always store window size un-scaledFlorian Westphal1-3/+5
2019-08-16netfilter: nfnetlink: avoid deadlock due to synchronous request_moduleFlorian Westphal1-1/+1
2019-07-28net: make skb_dst_force return true when dst is refcountedFlorian Westphal1-1/+5
2019-07-26ipvs: fix tinfo memory leak in start_sync_threadJulian Anastasov2-66/+72
2019-07-26ipvs: defer hook registration to avoid leaksJulian Anastasov1-7/+14
2019-07-26ipset: Fix memory accounting for hash types on resizeStefano Brivio1-1/+1
2019-07-10netfilter: nft_flow_offload: IPCB is only valid for ipv4 familyFlorian Westphal1-6/+11
2019-07-10netfilter: nft_flow_offload: don't offload when sequence numbers need adjustmentFlorian Westphal1-4/+2
2019-07-10netfilter: nft_flow_offload: set liberal tracking mode for tcpFlorian Westphal1-0/+8
2019-07-10netfilter: nf_flow_table: ignore DF bit settingFlorian Westphal1-2/+1
2019-06-22ipvs: Fix use-after-free in ip_vs_inYueHaibing1-1/+1
2019-06-22netfilter: nf_queue: fix reinject verdict handlingJagdish Motwani1-0/+1
2019-06-15netfilter: nf_flow_table: fix netdev refcnt leakTaehee Yoo1-0/+1
2019-06-15netfilter: nf_flow_table: check ttl value in flow offload data pathTaehee Yoo1-0/+6
2019-06-15netfilter: nf_tables: fix base chain stat rcu_dereference usageFlorian Westphal1-2/+7
2019-06-15netfilter: nf_conntrack_h323: restore boundary check correctnessJakub Jankowski1-1/+1
2019-06-15netfilter: nf_flow_table: fix missing error check for rhashtable_insert_fastTaehee Yoo1-7/+18