summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2020-05-20netfilter: nft_set_rbtree: Add missing expired checksPhil Sutter1-0/+11
2020-05-20netfilter: nft_set_rbtree: Introduce and use nft_rbtree_interval_start()Stefano Brivio1-6/+11
2020-05-20netfilter: conntrack: avoid gcc-10 zero-length-bounds warningArnd Bergmann1-2/+2
2020-05-14netfilter: nf_osf: avoid passing pointer to local varArnd Bergmann1-5/+7
2020-05-14netfilter: nat: never update the UDP checksum when it's 0Guillaume Nault1-3/+1
2020-05-02netfilter: nat: fix error handling upon registering inet hookHillf Danton1-2/+2
2020-04-23netfilter: nf_tables: report EOPNOTSUPP on unsupported flags/object typePablo Neira Ayuso1-2/+2
2020-04-01net: Fix CONFIG_NET_CLS_ACT=n and CONFIG_NFT_FWD_NETDEV={y, m} buildPablo Neira Ayuso1-3/+2
2020-04-01netfilter: nft_fwd_netdev: allow to redirect to ifb via ingressPablo Neira Ayuso1-0/+4
2020-04-01netfilter: nft_fwd_netdev: validate family and chain typePablo Neira Ayuso1-0/+9
2020-04-01netfilter: flowtable: reload ip{v6}h in nf_flow_tuple_ip{v6}Haishuang Yan1-0/+2
2020-03-21netfilter: xt_hashlimit: unregister proc file before releasing mutexCong Wang1-10/+6
2020-03-21netfilter: hashlimit: do not use indirect calls during gcFlorian Westphal1-18/+4
2020-03-18netfilter: nft_chain_nat: inet family is missing module ownershipPablo Neira Ayuso1-0/+1
2020-03-18netfilter: nf_tables: dump NFTA_CHAIN_FLAGS attributePablo Neira Ayuso1-0/+5
2020-03-18netfilter: nft_tunnel: add missing attribute validation for tunnelsJakub Kicinski1-0/+2
2020-03-18netfilter: nft_payload: add missing attribute validation for payload csum flagsJakub Kicinski1-0/+1
2020-03-18netfilter: cthelper: add missing attribute validation for cthelperJakub Kicinski1-0/+2
2020-03-18netfilter: x_tables: xt_mttg_seq_next should increase position indexVasily Averin1-3/+3
2020-03-18netfilter: xt_recent: recent_seq_next should increase position indexVasily Averin1-1/+1
2020-03-18netfilter: synproxy: synproxy_cpu_seq_next should increase position indexVasily Averin1-1/+1
2020-03-18netfilter: nf_conntrack: ct_cpu_seq_next should increase position indexVasily Averin1-1/+1
2020-03-18netfilter: nf_tables: fix infinite loop when expr is not availableFlorian Westphal1-7/+3
2020-03-05netfilter: nft_tunnel: no need to call htons() when dumping portsXin Long1-2/+2
2020-03-05netfilter: xt_hashlimit: reduce hashlimit_mutex scope for htable_put()Cong Wang1-6/+6
2020-03-05netfilter: ipset: Fix forceadd evaluation pathJozsef Kadlecsik1-0/+2
2020-03-05netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reportsJozsef Kadlecsik2-205/+462
2020-02-28netfilter: xt_hashlimit: limit the max size of hashtableCong Wang1-0/+10
2020-02-24netfilter: nft_tunnel: add the missing ERSPAN_VERSION nla_policyXin Long1-1/+2
2020-02-11netfilter: ipset: fix suspicious RCU usage in find_set_and_idKadlecsik József1-20/+21
2020-02-06netfilter: nf_tables_offload: fix check the chain offload flagwenxu1-1/+1
2020-02-06netfilter: conntrack: sctp: use distinct states for new SCTP connectionsJiri Wiesner1-3/+3
2020-01-29netfilter: nf_tables: autoload modules from the abort pathPablo Neira Ayuso2-43/+89
2020-01-29netfilter: nf_tables: add __nft_chain_type_get()Pablo Neira Ayuso1-8/+21
2020-01-29netfilter: ipset: use bitmap infrastructure completelyKadlecsik József4-10/+10
2020-01-29netfilter: nft_osf: add missing check for DREG attributeFlorian Westphal1-0/+3
2020-01-23netfilter: nf_tables: fix flowtable list del corruptionFlorian Westphal1-0/+6
2020-01-23netfilter: nf_tables: store transaction list locally while requesting modulePablo Neira Ayuso1-9/+10
2020-01-23netfilter: nf_tables: remove WARN and add NLA_STRING upper limitsFlorian Westphal1-4/+9
2020-01-23netfilter: nft_tunnel: ERSPAN_VERSION must not be nullFlorian Westphal1-0/+3
2020-01-23netfilter: nft_tunnel: fix null-attribute checkFlorian Westphal1-1/+1
2020-01-23netfilter: nat: fix ICMP header corruption on ICMP errorsEyal Birger1-0/+13
2020-01-23netfilter: fix a use-after-free in mtype_destroy()Cong Wang1-1/+1
2020-01-17netfilter: nft_meta: use 64-bit time arithmeticArnd Bergmann1-5/+5
2020-01-17netfilter: nf_tables_offload: release flow_rule on error from commit pathPablo Neira Ayuso1-5/+21
2020-01-17netfilter: nft_flow_offload: fix underflow in flowtable reference counterwenxu1-3/+0
2020-01-14netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is presentFlorian Westphal1-1/+2
2020-01-14netfilter: conntrack: dccp, sctp: handle null timeout argumentFlorian Westphal2-0/+6
2020-01-12netfilter: nf_tables_offload: return EOPNOTSUPP if rule specifies no actionsPablo Neira Ayuso1-0/+3
2020-01-12netfilter: nf_tables: skip module reference count bump on object updatesPablo Neira Ayuso1-1/+1