summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2018-08-03netfilter: nf_tables: check msg_type before nft_trans_set(trans)Alexey Kodanev1-5/+6
2018-08-03netfilter: ipset: forbid family for hash:mac setsFlorent Fourcot1-1/+4
2018-07-17netfilter: nf_queue: augment nfqa_cfg_policyEric Dumazet1-0/+3
2018-07-11netfilter: nf_log: don't hold nf_log_mutex during user accessJann Horn1-3/+6
2018-07-08ipvs: fix buffer overflow with sync daemon and serviceJulian Anastasov1-6/+15
2018-07-08netfilter: nft_limit: fix packet ratelimitingPablo Neira Ayuso1-14/+24
2018-07-08netfilter: nf_tables: use WARN_ON_ONCE instead of BUG_ON in nft_do_chain()Taehee Yoo1-1/+2
2018-07-08netfilter: nf_tables: fix NULL-ptr in nf_tables_dump_obj()Taehee Yoo1-1/+1
2018-07-08netfilter: nf_tables: add missing netlink attrs to policiesFlorian Westphal1-0/+3
2018-07-08netfilter: nf_tables: fix memory leak on error exit returnColin Ian King1-2/+4
2018-07-08netfilter: nf_tables: increase nft_counters_enabled in nft_chain_stats_replace()Taehee Yoo1-1/+3
2018-07-08netfilter: nf_tables: disable preemption in nft_update_chain_stats()Pablo Neira Ayuso1-2/+2
2018-07-08netfilter: nft_meta: fix wrong value dereference in nft_meta_set_evalTaehee Yoo1-6/+8
2018-07-08netfilter: nf_tables: bogus EBUSY in chain deletionsPablo Neira Ayuso2-7/+54
2018-07-08netfilter: nf_tables: don't assume chain stats are set when jumplabel is setFlorian Westphal1-7/+14
2018-07-08netfilter: nft_compat: fix handling of large matchinfo sizeFlorian Westphal1-1/+63
2018-07-08netfilter: nft_compat: prepare for indirect info storageFlorian Westphal1-11/+36
2018-07-08netfilter: nf_tables: nft_compat: fix refcount leak on xt moduleFlorian Westphal1-34/+58
2018-06-20netfilter: nf_tables: fix out-of-bounds in nft_chain_commit_updateTaehee Yoo1-1/+1
2018-06-16netfilter: nf_tables: fix NULL pointer dereference on nft_ct_helper_obj_dump()Taehee Yoo1-8/+12
2018-05-30ipvs: remove IPS_NAT_MASK check to fix passive FTPJulian Anastasov1-1/+1
2018-05-22netfilter: nf_tables: can't fail after linking rule into active rule listFlorian Westphal1-27/+32
2018-05-22netfilter: nf_tables: free set name in error pathFlorian Westphal1-3/+5
2018-05-16ipvs: fix rtnl_lock lockups caused by start_sync_threadJulian Anastasov2-83/+80
2018-04-26netfilter: x_tables: limit allocation requests for blob rule headsFlorian Westphal1-0/+3
2018-04-26netfilter: compat: reject huge allocation requestsFlorian Westphal1-8/+18
2018-04-26netfilter: compat: prepare xt_compat_init_offsets to return errorsFlorian Westphal1-1/+3
2018-04-26netfilter: x_tables: add counters allocation wrapperFlorian Westphal1-0/+15
2018-04-26netfilter: x_tables: cap allocations at 512 mbyteFlorian Westphal1-1/+2
2018-04-26netfilter: x_tables: fix pointer leaks to userspaceDmitry Vyukov5-2/+5
2018-04-19netfilter: ipset: Missing nfnl_lock()/nfnl_unlock() is added to ip_set_net_ex...Jozsef Kadlecsik1-0/+2
2018-04-08netfilter: x_tables: add and use xt_check_proc_nameFlorian Westphal3-9/+43
2018-04-08netfilter: x_tables: make allocation less aggressiveMichal Hocko1-1/+6
2018-03-15netfilter: IDLETIMER: be syzkaller friendlyEric Dumazet1-3/+6
2018-03-15netfilter: nat: cope with negative port rangePaolo Abeni1-2/+5
2018-03-15netfilter: x_tables: fix missing timer initialization in xt_LEDPaolo Abeni1-6/+6
2018-03-15netfilter: xt_hashlimit: fix lock imbalanceEric Dumazet1-1/+1
2018-03-03netfilter: nf_tables: fix potential NULL-ptr deref in nf_tables_dump_obj_done()Hangbin Liu1-2/+4
2018-03-03netfilter: nf_tables: fix chain filter in nf_tables_dump_rules()Pablo Neira Ayuso1-1/+1
2018-02-25netfilter: xt_bpf: add overflow checksJann Horn1-0/+6
2018-02-25netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insertCong Wang1-5/+17
2018-02-25netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1()Cong Wang1-0/+1
2018-02-25netfilter: x_tables: avoid out-of-bounds reads in xt_request_find_{match|target}Eric Dumazet1-0/+6
2018-02-25netfilter: x_tables: fix int overflow in xt_alloc_table_info()Dmitry Vyukov1-2/+1
2018-01-31netfilter: xt_osf: Add missing permission checksKevin Cernekee1-0/+7
2018-01-31netfilter: nfnetlink_cthelper: Add missing permission checksKevin Cernekee1-0/+10
2017-12-20netfilter: ipvs: Fix inappropriate output of procfsKUWAZAWA Takuya1-0/+4
2017-11-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netLinus Torvalds1-1/+0
2017-11-02License cleanup: add SPDX GPL-2.0 license identifier to files with no licenseGreg Kroah-Hartman8-0/+8
2017-10-25netfilter: nft_set_hash: disable fast_ops for 2-len keysAnatole Denis1-1/+0