summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2018-06-01netfilter: IDLETIMER: be syzkaller friendlyEric Dumazet1-3/+6
2018-06-01netfilter: x_tables: fix missing timer initialization in xt_LEDPaolo Abeni1-6/+6
2018-06-01netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insertCong Wang1-5/+17
2018-02-13netfilter: xt_TCPMSS: add more sanity tests on tcph->doffEric Dumazet1-1/+5
2018-02-13netfilter: xt_TCPMSS: correct return value in tcpmss_mangle_packetPhil Oester1-1/+1
2018-02-13netfilter: xt_TCPMSS: fix handling of malformed TCP header and optionsPablo Neira Ayuso1-12/+16
2018-02-13netfilter: xt_TCPMSS: Fix missing fragmentation handlingPhil Oester1-3/+8
2018-02-13netfilter: xt_TCPOPTSTRIP: don't use tcp_hdr()Pablo Neira Ayuso1-2/+4
2018-02-13netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundaryPablo Neira Ayuso1-3/+14
2017-11-11netfilter: xt_socket: fix compilation warnings with gcc 4.7Pablo Neira Ayuso1-6/+6
2017-11-11ipv6: Add rt6_get_cookie() functionMartin KaFai Lau1-1/+1
2017-10-12netfilter: nf_conntrack: fix RCU race in nf_conntrack_find_getAndrey Vagin1-4/+17
2017-09-15netfilter: ctnetlink: fix incorrect nf_ct_put during hash resizeLiping Zhang1-1/+6
2017-08-26netfilter: ctnetlink: make it safer when updating ct->statusLiping Zhang1-6/+21
2017-02-23netfilter: nf_conntrack_sip: extend request line validationUlrich Weber1-1/+4
2017-02-23netfilter: restart search if moved to other chainFlorian Westphal1-0/+7
2016-11-20netfilter: nfnetlink_queue: reject verdict request from different portidLiping Zhang1-3/+0
2016-06-15nf_conntrack: avoid kernel pointer value leak in slab nameLinus Torvalds1-1/+3
2016-05-01ipvs: correct initial offset of Call-ID header search in SIP persistence engineMarco Angaroni1-1/+1
2015-08-12netfilter: nf_conntrack: Support expectations in different zonesJoe Stringer1-1/+2
2015-08-07ipvs: kernel oops - do_ip_vs_get_ctlHans Schillstrom2-22/+39
2015-08-07ipvs: fix memory leak in ip_vs_ctl.cTommi Rantala1-0/+3
2015-05-10ipvs: uninitialized data with IP_VS_IPV6Dan Carpenter1-5/+5
2015-05-10ipvs: rerouting to local clients is not needed anymoreJulian Anastasov1-11/+21
2015-05-10net: make skb_gso_segment error handling more robustFlorian Westphal1-1/+1
2015-05-10ipvs: add missing ip_vs_pe_put in sync codeJulian Anastasov1-0/+3
2015-05-10netfilter: xt_socket: fix a stack corruption bugEric Dumazet1-9/+13
2015-02-20netfilter: conntrack: disable generic tracking for known protocolsFlorian Westphal1-1/+25
2015-02-20netfilter: ipset: small potential read beyond the end of bufferDan Carpenter1-0/+6
2014-11-05ipvs: avoid netns exit crash on ip_vs_conn_drop_conntrackJulian Anastasov1-1/+0
2014-09-14inetpeer: get rid of ip_id_countEric Dumazet1-1/+1
2014-08-06ipvs: stop tot_stats estimator only under CONFIG_SYSCTLJulian Anastasov1-1/+1
2014-04-09netfilter: nf_conntrack_dccp: fix skb_header_pointer API usagesDaniel Borkmann1-3/+3
2013-11-28netfilter: nf_ct_sip: don't drop packets with offsets pointing outside the pa...Patrick McHardy1-1/+1
2013-10-27ip: generate unique IP identificator if local fragmentation is allowedAnsis Atteka1-1/+1
2013-05-30ipvs: ip_vs_sip_fill_param() BUG: bad check of return valueHans Schillstrom1-5/+1
2012-12-06netfilter: Validate the sequence number of dataless ACK packets as wellJozsef Kadlecsik1-8/+2
2012-12-06netfilter: Mark SYN/ACK packets as invalid from original directionJozsef Kadlecsik1-11/+8
2012-10-31netfilter: nf_conntrack: fix racy timer handling with reliable eventsPablo Neira Ayuso1-5/+11
2012-10-17netfilter: xt_limit: have r->cost != 0 case workJan Engelhardt1-4/+4
2012-10-17netfilter: limit, hashlimit: avoid duplicated inlineFlorian Westphal2-8/+5
2012-10-17netfilter: nf_ct_expect: fix possible access to uninitialized timerPablo Neira Ayuso1-23/+6
2012-09-19ipvs: fix info leak in getsockopt(IP_VS_SO_GET_TIMEOUT)Mathias Krause1-0/+1
2012-03-01ipvs: fix matching of fwmark templates during schedulingSimon Horman1-1/+1
2012-02-03net: reintroduce missing rcu_assign_pointer() callsEric Dumazet8-12/+12
2011-12-31netfilter: ctnetlink: fix timeout calculationXi Wang1-2/+2
2011-12-31ipvs: try also real server with port 0 in backup serverJulian Anastasov3-4/+10
2011-12-25Merge branch 'nf' of git://1984.lsi.us.es/netDavid S. Miller1-5/+13
2011-12-24netfilter: ctnetlink: fix scheduling while atomic if helper is autoloadedPablo Neira Ayuso1-0/+3
2011-12-24netfilter: ctnetlink: fix return value of ctnetlink_get_expect()Pablo Neira Ayuso1-5/+10
generated by cgit v1.2.3 (git 2.39.0) at 2025-08-24 02:58:38 +0300