summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2019-06-22ipvs: Fix use-after-free in ip_vs_inYueHaibing1-1/+1
2019-06-22netfilter: nft_fib: Fix existence check supportPhil Sutter1-3/+3
2019-06-22netfilter: nf_queue: fix reinject verdict handlingJagdish Motwani1-0/+1
2019-06-22netfilter: nf_tables: fix oops during rule dumpFlorian Westphal1-9/+11
2019-06-22netfilter: nat: fix udp checksum corruptionFlorian Westphal1-1/+1
2019-06-15netfilter: nf_flow_table: fix netdev refcnt leakTaehee Yoo1-0/+1
2019-06-15netfilter: nf_flow_table: check ttl value in flow offload data pathTaehee Yoo1-0/+6
2019-06-15netfilter: nf_tables: fix base chain stat rcu_dereference usageFlorian Westphal1-2/+7
2019-06-15netfilter: nf_conntrack_h323: restore boundary check correctnessJakub Jankowski1-1/+1
2019-06-15netfilter: nf_flow_table: fix missing error check for rhashtable_insert_fastTaehee Yoo1-7/+18
2019-05-31netfilter: ctnetlink: Resolve conntrack L3-protocol flush regressionKristian Evensen1-1/+1
2019-04-22netfilter: fix nf_l4proto_log_invalid to log invalid packetsAndrei Vagin1-1/+1
2019-04-22netfilter: never get/set skb->tstampFlorian Westphal4-16/+18
2019-04-15netfilter: nat: fix icmp id randomizationFlorian Westphal1-3/+8
2019-04-15netfilter: nf_tables: prevent shift wrap in nft_chain_parse_hook()Dan Carpenter1-1/+1
2019-04-15netfilter: ctnetlink: don't use conntrack/expect object addresses as idFlorian Westphal2-5/+64
2019-04-13ipvs: do not schedule icmp errors from tunnelsJulian Anastasov1-1/+1
2019-04-13netfilter: conntrack: initialize ct->timeoutAlexander Potapenko1-0/+1
2019-04-13netfilter: conntrack: don't set related state for different outer addressFlorian Westphal2-67/+78
2019-03-20netfilter: nf_tables: add missing ->release_ops() in error path of newrule()Taehee Yoo1-1/+4
2019-03-18netfilter: nft_redir: fix module autoload with ip4Pablo Neira Ayuso1-1/+1
2019-03-18netfilter: nf_tables: bogus EBUSY in helper removal from transactionPablo Neira Ayuso1-3/+16
2019-03-18netfilter: fix NETFILTER_XT_TARGET_TEE dependenciesArnd Bergmann1-0/+1
2019-03-18netfilter: nft_set_rbtree: check for inactive element after flag mismatchPablo Neira Ayuso1-4/+3
2019-03-18netfilter: nf_conntrack_sip: remove direct dependency on IPv6Alin Nastac1-21/+16
2019-03-11netfilter: nf_tables: return immediately on empty commitFlorian Westphal1-0/+5
2019-03-11netfilter: nf_tables: use-after-free in dynamic operationsPablo Neira Ayuso1-1/+3
2019-03-11netfilter: nf_tables: bogus EBUSY when deleting set after flushPablo Neira Ayuso4-13/+54
2019-03-08netfilter: nf_tables: fix set double-free in abort pathPablo Neira Ayuso1-6/+11
2019-03-08netfilter: nat: don't register device notifier twiceFlorian Westphal1-16/+19
2019-03-01netfilter: nf_tables: merge ipv4 and ipv6 nat chain typesFlorian Westphal3-0/+111
2019-03-01netfilter: nf_tables: nat: merge nft_masq protocol specific modulesFlorian Westphal2-13/+168
2019-03-01netfilter: nf_tables: nat: merge nft_redir protocol specific modulesFlorian Westphal2-12/+143
2019-03-01netfilter: xt_IDLETIMER: fix sysfs callback function typeSami Tolvanen1-10/+4
2019-03-01netfilter: nf_conntrack: ensure that CONNTRACK_LOCKS is power of 2Li RongQing1-0/+1
2019-03-01netfilter: nf_tables: check the result of dereferencing base_chain->statsLi RongQing1-6/+8
2019-03-01ipvs: get sctphdr by sctphoff in sctp_csum_checkXin Long1-5/+2
2019-03-01netfilter: convert the proto argument from u8 to u16Li RongQing1-2/+2
2019-03-01netfilter: nft_tunnel: Add dst_cache supportwenxu1-0/+7
2019-03-01netfilter: conntrack: tcp: only close if RST matches exact sequenceFlorian Westphal1-10/+40
2019-03-01ipvs: change some data types from int to boolAndrea Claudi5-18/+18
2019-02-27netfilter: nft_set_hash: remove nft_hash_key()Pablo Neira Ayuso1-11/+2
2019-02-27netfilter: nft_set_hash: bogus element self comparison from deactivation pathPablo Neira Ayuso1-1/+1
2019-02-27netfilter: nft_set_hash: fix lookups with fixed size hash on big endianPablo Neira Ayuso1-4/+19
2019-02-27netfilter: remove unneeded switch fall-throughLi RongQing2-2/+1
2019-02-27netfilter: conntrack: avoid same-timeout updateFlorian Westphal1-5/+4
2019-02-27netfilter: nat: remove nf_nat_l3proto.h and nf_nat_core.hFlorian Westphal7-19/+10
2019-02-27netfilter: nat: remove l3proto structFlorian Westphal2-92/+0
2019-02-27netfilter: nat: remove csum_recalc hookFlorian Westphal2-10/+24
2019-02-27netfilter: nat: remove csum_update hookFlorian Westphal1-33/+36