summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2020-01-29netfilter: ipset: use bitmap infrastructure completelyKadlecsik József4-10/+10
2020-01-27netfilter: nft_set_hash: fix lookups with fixed size hash on big endianPablo Neira Ayuso1-4/+19
2020-01-23netfilter: fix a use-after-free in mtype_destroy()Cong Wang1-1/+1
2020-01-14netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is presentFlorian Westphal1-1/+2
2020-01-12netfilter: nf_tables: validate NFT_SET_ELEM_INTERVAL_ENDPablo Neira Ayuso1-3/+9
2020-01-12netfilter: ctnetlink: netns exit must wait for callbacksFlorian Westphal1-0/+3
2020-01-04net: add bool confirm_neigh parameter for dst_ops.update_pmtuHangbin Liu1-1/+1
2020-01-04netfilter: nf_queue: enqueue skbs with NULL dstMarco Oliverio1-1/+1
2019-11-24netfilter: nft_compat: do not dump private areaPablo Neira Ayuso1-2/+22
2019-11-12ipvs: move old_secure_tcp into struct netns_ipvsEric Dumazet1-8/+7
2019-11-12ipvs: don't ignore errors in case refcounting ip_vs module failsDavide Caratti5-17/+28
2019-11-12netfilter: ipset: Fix an error code in ip_set_sockfn_get()Dan Carpenter1-3/+5
2019-10-11netfilter: nf_tables: allow lookups in dynamic setsFlorian Westphal2-5/+5
2019-09-21netfilter: nf_conntrack_ftp: Fix debug outputThomas Jarosch1-1/+1
2019-09-21netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_infoJuliana Rodrigueiro1-11/+25
2019-08-29netfilter: ipset: Fix rename concurrency with listingJozsef Kadlecsik1-1/+1
2019-08-25netfilter: conntrack: Use consistent ct id hash calculationDirk Morris1-8/+8
2019-08-16netfilter: nft_hash: fix symhash with modulus oneLaura Garcia Liebana1-1/+1
2019-08-16netfilter: nfnetlink: avoid deadlock due to synchronous request_moduleFlorian Westphal1-1/+1
2019-07-31net: make skb_dst_force return true when dst is refcountedFlorian Westphal1-1/+5
2019-07-31ipvs: fix tinfo memory leak in start_sync_threadJulian Anastasov2-66/+72
2019-07-31ipvs: defer hook registration to avoid leaksJulian Anastasov1-7/+14
2019-07-31ipset: Fix memory accounting for hash types on resizeStefano Brivio1-1/+1
2019-06-22ipvs: Fix use-after-free in ip_vs_inYueHaibing1-1/+1
2019-06-22netfilter: nf_queue: fix reinject verdict handlingJagdish Motwani1-0/+1
2019-05-16netfilter: nf_tables: warn when expr implements only one of activate/deactivateFlorian Westphal1-0/+19
2019-05-16netfilter: ctnetlink: don't use conntrack/expect object addresses as idFlorian Westphal2-5/+64
2019-05-16ipvs: do not schedule icmp errors from tunnelsJulian Anastasov1-1/+1
2019-05-16netfilter: compat: initialize all fields in xt_initFrancesco Ruggeri1-1/+1
2019-05-04netfilter: nft_set_rbtree: check for inactive element after flag mismatchPablo Neira Ayuso1-4/+3
2019-05-02ipvs: fix warning on unused variableAndrea Claudi1-1/+2
2019-04-20netfilter: xt_cgroup: shrink size of v2 pathPablo Neira Ayuso1-0/+72
2019-04-05netfilter: physdev: relax br_netfilter dependencyFlorian Westphal1-2/+7
2019-04-05netfilter: conntrack: fix cloned unconfirmed skb->_nfct race in __nf_conntrac...Chieh-Min Wang1-3/+11
2019-03-23ipvs: fix dependency on nf_defrag_ipv6Andrea Claudi3-6/+15
2019-03-14netfilter: nf_nat: skip nat clash resolution for same-origin entriesMartynas Pumputis1-0/+16
2019-03-14ipvs: Fix signed integer overflow when setsockopt timeoutZhangXiaoxu1-0/+12
2019-02-27netfilter: nft_compat: use-after-free when deleting targetsPablo Neira Ayuso1-1/+2
2019-02-27netfilter: nf_tables: fix flush after rule deletion in the same batchPablo Neira Ayuso1-0/+3
2019-02-27netfilter: nf_tables: fix leaking object reference countTaehee Yoo1-0/+2
2019-01-13netfilter: nat: can't use dst_hold on noref dstFlorian Westphal1-1/+2
2019-01-13netfilter: ipset: do not call ipset_nest_end after nla_nest_cancelPan Bian1-1/+1
2019-01-13netfilter: seqadj: re-load tcp header pointer after possible head reallocationFlorian Westphal1-3/+4
2019-01-09netfilter: nf_conncount: don't skip eviction when age is negativeFlorian Westphal1-1/+1
2019-01-09netfilter: nf_conncount: fix garbage collection confirm raceFlorian Westphal1-5/+47
2019-01-09netfilter: nf_conncount: Fix garbage collection with zonesYi-Hung Wei1-4/+9
2019-01-09netfilter: nf_conncount: expose connection list interfacePablo Neira Ayuso1-13/+23
2019-01-09netfilter: xt_connlimit: don't store address in the conn nodesFlorian Westphal1-6/+2
2018-12-21netfilter: ipset: Fix wraparound in hash:*net* typesJozsef Kadlecsik6-63/+63
2018-12-17netfilter: nf_tables: deactivate expressions in rule replecement routineTaehee Yoo1-11/+4