summaryrefslogtreecommitdiff
path: root/include/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2025-01-09netfilter: nft_set_hash: unaligned atomic read on struct nft_set_extPablo Neira Ayuso1-2/+5
2025-01-09netfilter: Replace zero-length array with flexible-array memberGustavo A. R. Silva3-5/+5
2024-08-19netfilter: nf_tables: use timestamp to check for set element timeoutPablo Neira Ayuso1-2/+19
2024-07-05netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registersPablo Neira Ayuso1-0/+5
2024-02-23netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()Dan Carpenter1-2/+2
2023-11-28netfilter: nf_tables: fix table flag updatesPablo Neira Ayuso1-6/+0
2023-11-28netfilter: nftables: update table flags from the commit phasePablo Neira Ayuso1-3/+6
2023-11-28netfilter: nf_tables: fix memleak when more than 255 elements expiredPablo Neira Ayuso1-1/+1
2023-11-28netfilter: nf_tables: defer gc run if previous batch is still pendingFlorian Westphal1-0/+5
2023-11-28netfilter: nf_tables: remove busy mark and gc batch APIPablo Neira Ayuso1-94/+3
2023-11-28netfilter: nf_tables: GC transaction API to avoid race with control planePablo Neira Ayuso1-1/+60
2023-11-28netfilter: nf_tables: drop map element references from preparation phasePablo Neira Ayuso1-1/+4
2023-11-20netfilter: nft_redir: use `struct nf_nat_range2` throughout and deduplicate e...Jeremy Sowden1-2/+1
2023-08-16netfilter: nf_tables: report use refcount overflowPablo Neira Ayuso1-4/+27
2023-07-27netfilter: nf_tables: reject unbound anonymous set before commit phasePablo Neira Ayuso1-0/+3
2023-07-27netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chainPablo Neira Ayuso1-0/+1
2023-07-27netfilter: nf_tables: use net_generic infra for transaction dataFlorian Westphal1-0/+10
2023-05-30netfilter: nf_tables: allow up to 64 bytes in the set element data areaPablo Neira Ayuso1-0/+4
2023-05-30netfilter: nftables: statify nft_parse_register()Pablo Neira Ayuso1-1/+0
2023-05-30netfilter: nftables: add nft_parse_register_store() and use itPablo Neira Ayuso4-8/+8
2023-05-30netfilter: nftables: add nft_parse_register_load() and use itPablo Neira Ayuso3-4/+4
2023-05-17netfilter: nf_tables: deactivate anonymous set from preparation phasePablo Neira Ayuso1-0/+1
2023-03-17netfilter: tproxy: fix deadlock due to missing BH disableFlorian Westphal1-0/+7
2022-06-06netfilter: conntrack: re-fetch conntrack after insertionFlorian Westphal1-1/+6
2022-03-08netfilter: nf_queue: fix possible use-after-freeFlorian Westphal1-1/+1
2022-03-02netfilter: nf_tables_offload: incorrect flow offload action array sizePablo Neira Ayuso2-3/+1
2020-12-30netfilter: nft_dynset: fix timeouts later than 23 daysPablo Neira Ayuso1-0/+4
2020-12-30netfilter: nft_compat: make sure xtables destructors have runFlorian Westphal1-0/+2
2020-12-11netfilter: nftables_offload: set address type in control dissectorPablo Neira Ayuso1-0/+4
2020-11-01netfilter: nftables_offload: KASAN slab-out-of-bounds Read in nft_flow_rule_c...Saeed Mirzamohammadi1-0/+6
2020-10-29netfilter: nf_log: missing vlan offload tag and protoPablo Neira Ayuso1-0/+1
2020-09-09netfilter: nf_tables: fix destination register zeroingFlorian Westphal1-0/+2
2020-05-20netfilter: conntrack: avoid gcc-10 zero-length-bounds warningArnd Bergmann1-1/+1
2019-11-04netfilter: nf_tables: Align nft_expr private data to 64-bitLukas Wunner1-1/+2
2019-09-25netfilter: nf_tables: bogus EBUSY when deleting flowtable after flushLaura Garcia Liebana1-0/+4
2019-09-20netfilter: nf_tables: add NFT_CHAIN_POLICY_UNSET and use itPablo Neira Ayuso1-0/+2
2019-09-13netfilter: conntrack: remove two unused functions from nf_conntrack_timestamp.h.Jeremy Sowden1-16/+0
2019-09-13netfilter: conntrack: remove CONFIG_NF_CONNTRACK checks from nf_conntrack_zon...Jeremy Sowden1-4/+1
2019-09-13netfilter: remove CONFIG_NETFILTER checks from headers.Jeremy Sowden10-35/+6
2019-09-13netfilter: conntrack: remove CONFIG_NF_CONNTRACK check from nf_conntrack_acct.h.Jeremy Sowden1-2/+0
2019-09-13netfilter: conntrack: move code to linux/nf_conntrack_common.h.Jeremy Sowden1-19/+5
2019-09-13netfilter: br_netfilter: update stub br_nf_pre_routing_ipv6 parameter to `voi...Jeremy Sowden1-1/+1
2019-09-13netfilter: conntrack: wrap two inline functions in config checks.Jeremy Sowden2-0/+6
2019-09-13netfilter: replace defined(CONFIG...) || defined(CONFIG...MODULE) with IS_ENA...Jeremy Sowden2-3/+3
2019-09-13netfilter: conntrack: use consistent style when defining inline functionsJeremy Sowden1-32/+50
2019-09-13netfilter: move nf_bridge_frag_data struct definition to a more appropriate h...Jeremy Sowden1-7/+0
2019-09-13netfilter: synproxy: move code between headers.Jeremy Sowden2-39/+38
2019-09-13netfilter: remove nf_conntrack_icmpv6.h header.Jeremy Sowden2-22/+0
2019-09-13netfilter: update include directives.Jeremy Sowden4-9/+11
2019-09-13netfilter: fix coding-style errors.Jeremy Sowden5-11/+11
generated by cgit v1.2.3 (git 2.39.0) at 2026-01-14 04:30:19 +0300