index
:
kernel/linux.git
linux-2.6.11.y
linux-2.6.12.y
linux-2.6.13.y
linux-2.6.14.y
linux-2.6.15.y
linux-2.6.16.y
linux-2.6.17.y
linux-2.6.18.y
linux-2.6.19.y
linux-2.6.20.y
linux-2.6.21.y
linux-2.6.22.y
linux-2.6.23.y
linux-2.6.24.y
linux-2.6.25.y
linux-2.6.26.y
linux-2.6.27.y
linux-2.6.28.y
linux-2.6.29.y
linux-2.6.30.y
linux-2.6.31.y
linux-2.6.32.y
linux-2.6.33.y
linux-2.6.34.y
linux-2.6.35.y
linux-2.6.36.y
linux-2.6.37.y
linux-2.6.38.y
linux-2.6.39.y
linux-3.0.y
linux-3.1.y
linux-3.10.y
linux-3.11.y
linux-3.12.y
linux-3.13.y
linux-3.14.y
linux-3.15.y
linux-3.16.y
linux-3.17.y
linux-3.18.y
linux-3.19.y
linux-3.2.y
linux-3.3.y
linux-3.4.y
linux-3.5.y
linux-3.6.y
linux-3.7.y
linux-3.8.y
linux-3.9.y
linux-4.0.y
linux-4.1.y
linux-4.10.y
linux-4.11.y
linux-4.12.y
linux-4.13.y
linux-4.14.y
linux-4.15.y
linux-4.16.y
linux-4.17.y
linux-4.18.y
linux-4.19.y
linux-4.2.y
linux-4.20.y
linux-4.3.y
linux-4.4.y
linux-4.5.y
linux-4.6.y
linux-4.7.y
linux-4.8.y
linux-4.9.y
linux-5.0.y
linux-5.1.y
linux-5.10.y
linux-5.11.y
linux-5.12.y
linux-5.13.y
linux-5.14.y
linux-5.15.y
linux-5.16.y
linux-5.17.y
linux-5.18.y
linux-5.19.y
linux-5.2.y
linux-5.3.y
linux-5.4.y
linux-5.5.y
linux-5.6.y
linux-5.7.y
linux-5.8.y
linux-5.9.y
linux-6.0.y
linux-6.1.y
linux-6.10.y
linux-6.2.y
linux-6.3.y
linux-6.4.y
linux-6.5.y
linux-6.6.y
linux-6.7.y
linux-6.8.y
linux-6.9.y
linux-rockchip-6.1.y
linux-rockchip-6.5.y
linux-rolling-lts
linux-rolling-stable
master
Linux kernel stable tree (mirror)
Andrey V.Kosteltsev
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
net
/
netfilter
Age
Commit message (
Expand
)
Author
Files
Lines
2017-07-05
netfilter: synproxy: fix conntrackd interaction
Eric Leblond
1
-0
/
+4
2017-07-05
netfilter: xt_TCPMSS: add more sanity tests on tcph->doff
Eric Dumazet
1
-1
/
+5
2017-02-08
netfilter; Add some missing default cases to switch statements in nft_reject.
David S. Miller
2
-0
/
+4
2017-02-08
netfilter: Fix switch statement warnings with recent gcc.
David Miller
2
-3
/
+11
2016-08-03
netfilter: x_tables: speed up jump target validation
Florian Westphal
1
-0
/
+50
2016-07-12
netfilter: x_tables: introduce and use xt_copy_counters_from_user
Florian Westphal
1
-0
/
+74
2016-07-12
netfilter: x_tables: do compat validation via translate_table
Florian Westphal
1
-0
/
+8
2016-07-12
netfilter: x_tables: xt_compat_match_from_user doesn't need a retval
Florian Westphal
1
-3
/
+2
2016-07-12
netfilter: x_tables: don't reject valid target size on some architectures
Florian Westphal
1
-2
/
+2
2016-07-12
netfilter: x_tables: validate all offsets and sizes in a rule
Florian Westphal
1
-5
/
+76
2016-07-12
netfilter: x_tables: check for bogus target offset
Florian Westphal
1
-2
/
+15
2016-07-12
netfilter: x_tables: check standard target size too
Florian Westphal
1
-0
/
+15
2016-07-12
netfilter: x_tables: add compat version of xt_check_entry_offsets
Florian Westphal
1
-0
/
+22
2016-07-12
netfilter: x_tables: assert minimum target size
Florian Westphal
1
-0
/
+3
2016-07-12
netfilter: x_tables: add and use xt_check_entry_offsets
Florian Westphal
1
-0
/
+34
2016-07-12
ipvs: correct initial offset of Call-ID header search in SIP persistence engine
Marco Angaroni
1
-1
/
+1
2016-05-18
nf_conntrack: avoid kernel pointer value leak in slab name
Linus Torvalds
1
-1
/
+3
2015-10-28
ipvs: fix crash with sync protocol v0 and FTP
Julian Anastasov
1
-1
/
+1
2015-10-28
ipvs: skb_orphan in case of forwarding
Alex Gartrell
1
-0
/
+27
2015-10-28
ipvs: fix crash if scheduler is changed
Julian Anastasov
3
-37
/
+69
2015-10-28
ipvs: do not use random local source address for tunnels
Julian Anastasov
1
-1
/
+0
2015-10-28
netfilter: nf_log: don't zap all loggers on unregister
Florian Westphal
1
-2
/
+6
2015-10-28
netfilter: nf_log: Introduce nft_log_dereference() macro
Marcelo Leitner
1
-12
/
+9
2015-10-28
netfilter: nft_compat: skip family comparison in case of NFPROTO_UNSPEC
Pablo Neira Ayuso
1
-6
/
+26
2015-10-28
netfilter: nf_log: wait for rcu grace after logger unregistration
Pablo Neira Ayuso
1
-0
/
+1
2015-10-28
netfilter: ctnetlink: put back references to master ct and expect objects
Pablo Neira Ayuso
1
-5
/
+0
2015-10-28
netfilter: nf_conntrack: Support expectations in different zones
Joe Stringer
1
-1
/
+2
2015-10-28
netfilter: nfnetlink: work around wrong endianess in res_id field
Pablo Neira Ayuso
1
-1
/
+7
2015-07-13
netfilter: nf_tables: allow to change chain policy without hook if it exists
Pablo Neira Ayuso
1
-1
/
+4
2015-07-13
netfilter: nft_compat: set IP6T_F_PROTO flag if protocol is set
Pablo Neira Ayuso
1
-0
/
+6
2015-07-13
netfilter: Zero the tuple in nfnl_cthelper_parse_tuple()
Ian Wilson
1
-0
/
+3
2015-07-12
netfilter: nfnetlink_cthelper: Remove 'const' and '&' to avoid warnings
Chen Gang
1
-2
/
+2
2015-07-05
netfilter: nf_qeueue: Drop queue entries on nf_unregister_hook
Eric W. Biederman
4
-1
/
+42
2015-06-28
netfilter: x_tables: fix cgroup matching on non-full sks
Daniel Borkmann
1
-1
/
+1
2015-01-30
ipvs: uninitialized data with IP_VS_IPV6
Dan Carpenter
1
-5
/
+5
2015-01-30
netfilter: conntrack: fix race between confirmation and flush
Pablo Neira Ayuso
1
-11
/
+9
2015-01-30
netfilter: nfnetlink: relax strict multicast group check from netlink_bind
Pablo Neira Ayuso
1
-1
/
+1
2015-01-30
netfilter: nf_tables: fix flush ruleset chain dependencies
Pablo Neira Ayuso
1
-5
/
+9
2015-01-30
netfilter: nfnetlink: validate nfnetlink header from batch
Pablo Neira Ayuso
1
-1
/
+2
2014-11-25
Revert "netfilter: conntrack: fix race in __nf_conntrack_confirm against get_...
Pablo Neira
1
-8
/
+6
2014-11-17
netfilter: nfnetlink: fix insufficient validation in nfnetlink_bind
Pablo Neira Ayuso
1
-1
/
+11
2014-11-14
netfilter: conntrack: fix race in __nf_conntrack_confirm against get_next_corpse
bill bonaparte
1
-6
/
+8
2014-11-12
netfilter: nf_tables: restore synchronous object release from commit/abort
Pablo Neira Ayuso
1
-16
/
+8
2014-11-12
netfilter: nft_compat: use the match->table to validate dependencies
Pablo Neira Ayuso
1
-2
/
+2
2014-11-12
netfilter: nft_compat: relax chain type validation
Pablo Neira Ayuso
1
-30
/
+2
2014-11-12
netfilter: nft_compat: use current net namespace
Pablo Neira Ayuso
1
-2
/
+2
2014-11-12
ipvs: Keep skb->sk when allocating headroom on tunnel xmit
Calvin Owens
1
-0
/
+2
2014-11-11
netfilter: ipset: small potential read beyond the end of buffer
Dan Carpenter
1
-0
/
+6
2014-10-28
ipvs: Avoid null-pointer deref in debug code
Alex Gartrell
1
-2
/
+2
2014-10-28
netfilter: nft_compat: fix wrong target lookup in nft_target_select_ops()
Arturo Borrero
1
-1
/
+1
[next]