summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2019-03-14netfilter: xt_TEE: add missing code to get interface index in checkentry.Taehee Yoo1-0/+7
2019-03-14netfilter: xt_TEE: fix wrong interface selectionTaehee Yoo1-17/+52
2019-03-14netfilter: nf_nat: skip nat clash resolution for same-origin entriesMartynas Pumputis1-0/+16
2019-03-14ipvs: Fix signed integer overflow when setsockopt timeoutZhangXiaoxu1-0/+12
2019-02-27netfilter: nfnetlink_osf: add missing fmatch checkFernando Fernandez Mancera1-0/+4
2019-02-27netfilter: nft_compat: use-after-free when deleting targetsPablo Neira Ayuso1-1/+2
2019-02-27netfilter: nf_tables: fix flush after rule deletion in the same batchPablo Neira Ayuso1-0/+3
2019-02-27netfilter: nft_flow_offload: fix checking method of conntrack helperHenry Yen1-1/+4
2019-02-27netfilter: nft_flow_offload: fix interaction with vrf slave devicewenxu2-4/+5
2019-02-27netfilter: nft_flow_offload: Fix reverse route lookupwenxu1-2/+2
2019-02-27netfilter: nf_tables: fix leaking object reference countTaehee Yoo1-0/+2
2019-01-26netfilter: ipset: Allow matching on destination MAC address for mac and ipmac...Stefano Brivio3-16/+20
2019-01-22netfilter: nf_conncount: fix argument order to find_next_bitFlorian Westphal1-1/+1
2019-01-22netfilter: nf_conncount: speculative garbage collection on empty listsPablo Neira Ayuso1-32/+15
2019-01-22netfilter: nf_conncount: move all list iterations under spinlockPablo Neira Ayuso1-26/+20
2019-01-22netfilter: nf_conncount: merge lookup and add functionsFlorian Westphal2-91/+69
2019-01-22netfilter: nf_conncount: restart search when nodes have been erasedFlorian Westphal1-11/+7
2019-01-22netfilter: nf_conncount: split gc in two phasesFlorian Westphal1-3/+19
2019-01-22netfilter: nf_conncount: don't skip eviction when age is negativeFlorian Westphal1-1/+1
2019-01-22netfilter: nf_conncount: replace CONNCOUNT_LOCK_SLOTS with CONNCOUNT_SLOTSShawn Bohrer1-14/+5
2019-01-13netfilter: nf_conncount: use rb_link_node_rcu() instead of rb_link_node()Taehee Yoo1-1/+1
2019-01-13netfilter: nat: can't use dst_hold on noref dstFlorian Westphal1-1/+2
2019-01-13netfilter: ipset: do not call ipset_nest_end after nla_nest_cancelPan Bian1-1/+1
2019-01-13netfilter: seqadj: re-load tcp header pointer after possible head reallocationFlorian Westphal1-3/+4
2019-01-13netfilter: nf_tables: fix suspicious RCU usage in nft_chain_stats_replace()Taehee Yoo2-9/+14
2018-12-17netfilter: nf_tables: deactivate expressions in rule replecement routineTaehee Yoo1-11/+4
2018-12-17netfilter: nf_conncount: remove wrong condition check routineTaehee Yoo1-5/+2
2018-12-17netfilter: add missing error handling code for register functionsTaehee Yoo1-1/+4
2018-12-17ipvs: call ip_vs_dst_notifier earlier than ipv6_dev_notfXin Long1-0/+3
2018-12-17netfilter: xt_hashlimit: fix a possible memory leak in htable_create()Taehee Yoo1-6/+3
2018-12-17netfilter: nf_tables: fix use-after-free when deleting compat expressionsFlorian Westphal2-3/+5
2018-12-17netfilter: xt_RATEEST: remove netns exit routineTaehee Yoo1-10/+0
2018-12-17netfilter: nf_tables: don't skip inactive chains during updateFlorian Westphal1-6/+3
2018-12-17netfilter: nf_conncount: fix unexpected permanent node of list.Taehee Yoo1-3/+15
2018-12-17netfilter: nf_conncount: fix list_del corruption in conn_freeTaehee Yoo1-2/+5
2018-12-17netfilter: nf_conncount: use spin_lock_bh instead of spin_lockTaehee Yoo1-6/+6
2018-11-27netfilter: nft_compat: ebtables 'nat' table is normal chain typeFlorian Westphal1-9/+12
2018-11-27netfilter: ipset: Fix calling ip_set() macro at dumpingJozsef Kadlecsik1-4/+8
2018-11-27netfilter: xt_IDLETIMER: add sysfs filename checking routineTaehee Yoo1-0/+20
2018-11-27netfilter: ipset: fix ip_set_list allocation failureAndrey Ryabinin1-4/+4
2018-11-27netfilter: ipset: actually allow allowable CIDR 0 in hash:net,port,netEric Westbrook1-4/+4
2018-11-27netfilter: ipset: list:set: Decrease refcount synchronously on deletion and r...Stefano Brivio2-18/+22
2018-11-27Revert "netfilter: nft_numgen: add map lookups for numgen random operations"Pablo Neira Ayuso1-127/+0
2018-11-21netfilter: conntrack: fix calculation of next bucket number in early_dropVasily Khoruzhick1-5/+8
2018-11-13netfilter: xt_nat: fix DNAT target for shifted portmap rangesPaolo Abeni1-0/+2
2018-09-28netfilter: xt_socket: check sk before checking for netns.Flavio Leitner1-2/+2
2018-09-28netfilter: nft_set_rbtree: add missing rb_erase() in GC routineTaehee Yoo1-14/+14
2018-09-20netfilter: conntrack: get rid of double sizeofzhong jiang1-2/+2
2018-09-20netfilter: nft_osf: use enum nft_data_types for nft_validate_register_storeStefan Agner1-1/+1
2018-09-12Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller17-96/+175