summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2019-03-14netfilter: nft_compat: don't use refcount_inc on newly allocated entryFlorian Westphal1-39/+23
2019-03-14netfilter: nf_tables: unbind set in rule from commit pathPablo Neira Ayuso6-79/+72
2019-03-14netfilter: nf_nat: skip nat clash resolution for same-origin entriesMartynas Pumputis1-0/+16
2019-03-14ipvs: Fix signed integer overflow when setsockopt timeoutZhangXiaoxu1-0/+12
2019-03-14netfilter: nft_compat: destroy function must not have side effectsFlorian Westphal1-1/+47
2019-03-14netfilter: nft_compat: make lists per netnsFlorian Westphal1-40/+89
2019-03-14netfilter: nft_compat: use refcnt_t type for nft_xt reference countFlorian Westphal1-8/+8
2019-02-27netfilter: nfnetlink_osf: add missing fmatch checkFernando Fernandez Mancera1-0/+4
2019-02-27netfilter: nft_compat: use-after-free when deleting targetsPablo Neira Ayuso1-1/+2
2019-02-27netfilter: nf_tables: fix flush after rule deletion in the same batchPablo Neira Ayuso1-0/+3
2019-02-27netfilter: nft_flow_offload: fix checking method of conntrack helperHenry Yen1-1/+4
2019-02-27netfilter: nft_flow_offload: fix interaction with vrf slave devicewenxu2-4/+5
2019-02-27netfilter: nft_flow_offload: Fix reverse route lookupwenxu1-2/+2
2019-02-27netfilter: nf_tables: fix leaking object reference countTaehee Yoo1-0/+2
2019-01-26netfilter: ipset: Allow matching on destination MAC address for mac and ipmac...Stefano Brivio3-16/+20
2019-01-22netfilter: nf_conncount: fix argument order to find_next_bitFlorian Westphal1-1/+1
2019-01-22netfilter: nf_conncount: speculative garbage collection on empty listsPablo Neira Ayuso1-32/+15
2019-01-22netfilter: nf_conncount: move all list iterations under spinlockPablo Neira Ayuso1-26/+20
2019-01-22netfilter: nf_conncount: merge lookup and add functionsFlorian Westphal2-91/+69
2019-01-22netfilter: nf_conncount: restart search when nodes have been erasedFlorian Westphal1-11/+7
2019-01-22netfilter: nf_conncount: split gc in two phasesFlorian Westphal1-3/+19
2019-01-22netfilter: nf_conncount: don't skip eviction when age is negativeFlorian Westphal1-1/+1
2019-01-22netfilter: nf_conncount: replace CONNCOUNT_LOCK_SLOTS with CONNCOUNT_SLOTSShawn Bohrer1-14/+5
2018-12-13netfilter: nf_conncount: use rb_link_node_rcu() instead of rb_link_node()Taehee Yoo1-1/+1
2018-12-13netfilter: nat: can't use dst_hold on noref dstFlorian Westphal1-1/+2
2018-12-13netfilter: ipset: do not call ipset_nest_end after nla_nest_cancelPan Bian1-1/+1
2018-12-07netfilter: seqadj: re-load tcp header pointer after possible head reallocationFlorian Westphal1-3/+4
2018-12-04netfilter: nf_tables: fix suspicious RCU usage in nft_chain_stats_replace()Taehee Yoo2-9/+14
2018-11-28netfilter: nf_tables: deactivate expressions in rule replecement routineTaehee Yoo1-11/+4
2018-11-27netfilter: nf_conncount: remove wrong condition check routineTaehee Yoo1-5/+2
2018-11-27netfilter: add missing error handling code for register functionsTaehee Yoo1-1/+4
2018-11-26netfilter: nfnetlink_cttimeout: fetch timeouts for udplite and gre, tooFlorian Westphal2-14/+15
2018-11-26ipvs: call ip_vs_dst_notifier earlier than ipv6_dev_notfXin Long1-0/+3
2018-11-17netfilter: xt_hashlimit: fix a possible memory leak in htable_create()Taehee Yoo1-6/+3
2018-11-13netfilter: nf_tables: fix use-after-free when deleting compat expressionsFlorian Westphal2-3/+5
2018-11-13netfilter: xt_RATEEST: remove netns exit routineTaehee Yoo1-10/+0
2018-11-12netfilter: nf_tables: don't use position attribute on rule replacementFlorian Westphal1-10/+7
2018-11-12netfilter: nf_tables: don't skip inactive chains during updateFlorian Westphal1-6/+3
2018-11-12netfilter: nf_conncount: fix unexpected permanent node of list.Taehee Yoo1-3/+15
2018-11-12netfilter: nf_conncount: fix list_del corruption in conn_freeTaehee Yoo1-2/+5
2018-11-12netfilter: nf_conncount: use spin_lock_bh instead of spin_lockTaehee Yoo1-6/+6
2018-11-06Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netLinus Torvalds16-238/+143
2018-11-03netfilter: conntrack: fix calculation of next bucket number in early_dropVasily Khoruzhick1-5/+8
2018-11-03netfilter: nft_compat: ebtables 'nat' table is normal chain typeFlorian Westphal1-9/+12
2018-11-03netfilter: nfnetlink_cttimeout: pass default timeout policy to obj_to_nlattrPablo Neira Ayuso1-7/+40
2018-11-03netfilter: conntrack: add nf_{tcp,udp,sctp,icmp,dccp,icmpv6,generic}_pernet()Pablo Neira Ayuso7-59/+24
2018-11-03netfilter: ipset: Fix calling ip_set() macro at dumpingJozsef Kadlecsik1-4/+8
2018-11-03netfilter: xt_IDLETIMER: add sysfs filename checking routineTaehee Yoo1-0/+20
2018-11-02Merge branch 'work.afs' of git://git.kernel.org/pub/scm/linux/kernel/git/viro...Linus Torvalds1-1/+1
2018-11-01netfilter: ipset: fix ip_set_list allocation failureAndrey Ryabinin1-4/+4