summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2018-06-20netfilter: nf_tables: fix out-of-bounds in nft_chain_commit_updateTaehee Yoo1-1/+1
2018-06-16netfilter: nf_tables: fix NULL pointer dereference on nft_ct_helper_obj_dump()Taehee Yoo1-8/+12
2018-05-22netfilter: nf_tables: nf_tables_obj_lookup_byhandle() can be statickbuild test robot1-4/+4
2018-05-22netfilter: nf_tables: can't fail after linking rule into active rule listFlorian Westphal1-27/+32
2018-05-22netfilter: nf_tables: free set name in error pathFlorian Westphal1-3/+5
2018-05-16ipvs: fix rtnl_lock lockups caused by start_sync_threadJulian Anastasov2-83/+80
2018-04-26netfilter: x_tables: limit allocation requests for blob rule headsFlorian Westphal1-0/+3
2018-04-26netfilter: compat: reject huge allocation requestsFlorian Westphal1-8/+18
2018-04-26netfilter: compat: prepare xt_compat_init_offsets to return errorsFlorian Westphal1-1/+3
2018-04-26netfilter: x_tables: add counters allocation wrapperFlorian Westphal1-0/+15
2018-04-26netfilter: x_tables: cap allocations at 512 mbyteFlorian Westphal1-1/+2
2018-03-22netfilter: nf_tables: do not hold reference on netdevice from preparation phasePablo Neira Ayuso1-15/+4
2018-03-22netfilter: nf_tables: cache device name in flowtable objectPablo Neira Ayuso1-6/+9
2018-03-20netfilter: nf_tables: add missing netlink attrs to policiesFlorian Westphal1-0/+3
2018-03-20netfilter: nf_tables: permit second nat hook if colliding hook is going awayFlorian Westphal1-1/+63
2018-03-20netfilter: nf_tables: meter: pick a set backend that supports updatesFlorian Westphal2-2/+5
2018-03-11netfilter: nf_tables: release flowtable hooksPablo Neira Ayuso1-0/+1
2018-03-11netfilter: x_tables: add and use xt_check_proc_nameFlorian Westphal3-9/+43
2018-03-06netfilter: nft_set_hash: skip fixed hash if timeout is specifiedPablo Neira Ayuso1-1/+1
2018-02-28ipvs: remove IPS_NAT_MASK check to fix passive FTPJulian Anastasov1-1/+1
2018-02-27netfilter: nf_tables: use the right index from flowtable error pathPablo Neira Ayuso1-1/+1
2018-02-27netfilter: nf_tables: missing attribute validation in nf_tables_delflowtable()Pablo Neira Ayuso1-0/+5
2018-02-27netfilter: nf_tables: return EBUSY if device already belongs to flowtablePablo Neira Ayuso1-1/+17
2018-02-19netfilter: IDLETIMER: be syzkaller friendlyEric Dumazet1-3/+6
2018-02-16netfilter: xt_hashlimit: fix lock imbalanceEric Dumazet1-1/+1
2018-02-14netfilter: nat: cope with negative port rangePaolo Abeni1-2/+5
2018-02-14netfilter: x_tables: fix missing timer initialization in xt_LEDPaolo Abeni1-5/+5
2018-02-14netfilter: x_tables: use pr ratelimiting in all remaining spotsFlorian Westphal28-95/+105
2018-02-14netfilter: x_tables: use pr ratelimiting in matches/targetsFlorian Westphal3-33/+40
2018-02-14netfilter: x_tables: rate-limit table mismatch warningsFlorian Westphal2-4/+4
2018-02-14netfilter: xt_set: use pr ratelimitingFlorian Westphal1-25/+25
2018-02-14netfilter: xt_NFQUEUE: use pr ratelimitingFlorian Westphal1-3/+5
2018-02-14netfilter: xt_CT: use pr ratelimitingFlorian Westphal1-12/+13
2018-02-14netfilter: x_tables: use pr ratelimiting in xt coreFlorian Westphal1-36/+34
2018-02-14netfilter: x_tables: remove pr_info where possibleFlorian Westphal6-28/+12
2018-02-08netfilter: x_tables: remove size checkMichal Hocko1-4/+0
2018-02-07netfilter: nf_flow_offload: fix use-after-free and a resource leakFelix Fietkau1-20/+7
2018-02-07netfilter: nf_tables: fix flowtable freePablo Neira Ayuso3-13/+22
2018-02-07netfilter: nft_flow_offload: move flowtable cleanup routines to nf_flow_tablePablo Neira Ayuso2-18/+25
2018-02-07netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insertCong Wang1-5/+17
2018-02-02netfilter: nft_flow_offload: no need to flush entries on module removalPablo Neira Ayuso1-6/+0
2018-02-02netfilter: nft_flow_offload: wait for garbage collector to run after cleanupPablo Neira Ayuso2-4/+5
2018-02-02netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1()Cong Wang1-0/+1
2018-02-02netfilter: flowtable infrastructure depends on NETFILTER_INGRESSPablo Neira Ayuso1-3/+5
2018-02-02netfilter: x_tables: make allocation less aggressiveMichal Hocko1-1/+6
2018-02-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller12-67/+75
2018-02-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds65-1523/+3059
2018-01-31netfilter: x_tables: fix pointer leaks to userspaceDmitry Vyukov5-2/+5
2018-01-31netfilter: ipset: Fix wraparound in hash:*net* typesJozsef Kadlecsik6-63/+63
2018-01-31Merge branch 'work.sock_recvmsg' of git://git.kernel.org/pub/scm/linux/kernel...Linus Torvalds1-6/+3