summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2019-09-10netfilter: nft_flow_offload: skip tcp rst and fin packetsPablo Neira Ayuso1-3/+6
2019-09-10netfilter: nf_tables: use-after-free in failing rule with bound setPablo Neira Ayuso1-5/+10
2019-08-29netfilter: ipset: Fix rename concurrency with listingJozsef Kadlecsik1-1/+1
2019-08-29netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and hash:ip,mac...Stefano Brivio2-2/+2
2019-08-29netfilter: ipset: Actually allow destination MAC address for hash:ip,mac sets...Stefano Brivio1-4/+0
2019-08-25netfilter: conntrack: Use consistent ct id hash calculationDirk Morris1-8/+8
2019-08-16netfilter: nft_hash: fix symhash with modulus oneLaura Garcia Liebana1-1/+1
2019-08-16netfilter: conntrack: always store window size un-scaledFlorian Westphal1-3/+5
2019-08-16netfilter: nfnetlink: avoid deadlock due to synchronous request_moduleFlorian Westphal1-1/+1
2019-07-28net: make skb_dst_force return true when dst is refcountedFlorian Westphal1-1/+5
2019-07-26ipvs: fix tinfo memory leak in start_sync_threadJulian Anastasov2-66/+72
2019-07-26ipvs: defer hook registration to avoid leaksJulian Anastasov1-7/+14
2019-07-26ipset: Fix memory accounting for hash types on resizeStefano Brivio1-1/+1
2019-07-10netfilter: nft_flow_offload: IPCB is only valid for ipv4 familyFlorian Westphal1-6/+11
2019-07-10netfilter: nft_flow_offload: don't offload when sequence numbers need adjustmentFlorian Westphal1-4/+2
2019-07-10netfilter: nft_flow_offload: set liberal tracking mode for tcpFlorian Westphal1-0/+8
2019-07-10netfilter: nf_flow_table: ignore DF bit settingFlorian Westphal1-2/+1
2019-06-22ipvs: Fix use-after-free in ip_vs_inYueHaibing1-1/+1
2019-06-22netfilter: nf_queue: fix reinject verdict handlingJagdish Motwani1-0/+1
2019-06-15netfilter: nf_flow_table: fix netdev refcnt leakTaehee Yoo1-0/+1
2019-06-15netfilter: nf_flow_table: check ttl value in flow offload data pathTaehee Yoo1-0/+6
2019-06-15netfilter: nf_tables: fix base chain stat rcu_dereference usageFlorian Westphal1-2/+7
2019-06-15netfilter: nf_conntrack_h323: restore boundary check correctnessJakub Jankowski1-1/+1
2019-06-15netfilter: nf_flow_table: fix missing error check for rhashtable_insert_fastTaehee Yoo1-7/+18
2019-06-04jump_label: move 'asm goto' support test to KconfigMasahiro Yamada1-3/+3
2019-05-16netfilter: nf_tables: add missing ->release_ops() in error path of newrule()Taehee Yoo1-1/+4
2019-05-16netfilter: nf_tables: use-after-free in dynamic operationsPablo Neira Ayuso1-1/+3
2019-05-16netfilter: fix nf_l4proto_log_invalid to log invalid packetsAndrei Vagin1-1/+1
2019-05-16netfilter: nf_tables: prevent shift wrap in nft_chain_parse_hook()Dan Carpenter1-1/+1
2019-05-16netfilter: ctnetlink: don't use conntrack/expect object addresses as idFlorian Westphal2-5/+64
2019-05-16ipvs: do not schedule icmp errors from tunnelsJulian Anastasov1-1/+1
2019-05-04netfilter: fix NETFILTER_XT_TARGET_TEE dependenciesArnd Bergmann1-0/+1
2019-05-04netfilter: nft_set_rbtree: check for inactive element after flag mismatchPablo Neira Ayuso1-4/+3
2019-05-02ipvs: fix warning on unused variableAndrea Claudi1-1/+2
2019-05-02netfilter: nf_tables: bogus EBUSY in helper removal from transactionPablo Neira Ayuso1-3/+16
2019-05-02netfilter: nf_tables: bogus EBUSY when deleting set after flushPablo Neira Ayuso4-13/+54
2019-05-02netfilter: nf_tables: fix set double-free in abort pathPablo Neira Ayuso1-6/+11
2019-05-02netfilter: nft_compat: use .release_ops and remove list of extensionPablo Neira Ayuso2-227/+61
2019-05-02netfilter: nft_compat: don't use refcount_inc on newly allocated entryFlorian Westphal1-39/+23
2019-05-02netfilter: nf_tables: unbind set in rule from commit pathPablo Neira Ayuso6-79/+72
2019-05-02netfilter: nf_tables: warn when expr implements only one of activate/deactivateFlorian Westphal1-0/+19
2019-05-02netfilter: nft_compat: destroy function must not have side effectsFlorian Westphal1-1/+47
2019-05-02netfilter: nf_tables: split set destruction in deactivate and destroy phaseFlorian Westphal4-14/+83
2019-05-02netfilter: nft_compat: make lists per netnsFlorian Westphal1-40/+89
2019-05-02netfilter: nft_compat: use refcnt_t type for nft_xt reference countFlorian Westphal1-8/+8
2019-04-20netfilter: nf_flow_table: remove flowtable hook flush routine in netns exit r...Taehee Yoo1-3/+0
2019-04-20netfilter: xt_cgroup: shrink size of v2 pathPablo Neira Ayuso1-0/+72
2019-04-17netfilter: nfnetlink_cttimeout: fetch timeouts for udplite and gre, tooFlorian Westphal2-14/+15
2019-04-17netfilter: nfnetlink_cttimeout: pass default timeout policy to obj_to_nlattrPablo Neira Ayuso1-6/+40
2019-04-05netfilter: physdev: relax br_netfilter dependencyFlorian Westphal1-2/+7