summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2017-11-15netfilter: nft_meta: deal with PACKET_LOOPBACK in netdev familyLiping Zhang1-1/+27
2017-10-21netfilter: nf_ct_expect: Change __nf_ct_expect_check() return value.Jarno Rajahalme1-2/+2
2017-10-08netfilter: nfnl_cthelper: fix incorrect helper->expect_class_maxLiping Zhang1-9/+11
2017-10-08netfilter: invoke synchronize_rcu after set the _hook_ to NULLLiping Zhang4-1/+6
2017-09-27net/netfilter/nf_conntrack_core: Fix net_conntrack_lock()Manfred Spraul1-23/+29
2017-08-30netfilter: nat: fix src map lookupFlorian Westphal1-8/+9
2017-08-25netfilter: nf_ct_ext: fix possible panic after nf_ct_extend_unregisterLiping Zhang1-3/+10
2017-07-28ipvs: SNAT packet replies only for NATed connectionsJulian Anastasov1-5/+14
2017-07-05netfilter: synproxy: fix conntrackd interactionEric Leblond1-0/+4
2017-07-05netfilter: xt_TCPMSS: add more sanity tests on tcph->doffEric Dumazet1-1/+5
2017-06-17netfilter: nft_log: restrict the log prefix length to 127Liping Zhang2-2/+2
2017-06-17netfilter: nf_tables: fix set->nelems counting with no NLM_F_EXCLPablo Neira Ayuso1-7/+9
2017-06-17netfilter: nf_conntrack_sip: fix wrong memory initialisationChristophe Leroy1-2/+0
2017-06-14netfilter: nft_set_rbtree: handle element re-addition after deletionPablo Neira Ayuso1-11/+11
2017-03-12netfilter: conntrack: refine gc worker heuristics, reduxFlorian Westphal1-19/+20
2017-03-12netfilter: conntrack: remove GC_MAX_EVICTS breakFlorian Westphal1-5/+2
2017-02-26netfilter: nf_ct_helper: warn when not applying default helper assignmentJiri Kosina1-13/+26
2016-11-24netfilter: nft_range: add the missing NULL pointer checkLiping Zhang1-0/+6
2016-11-24netfilter: nf_tables: fix inconsistent element expiration calculationAnders K. Pedersen1-5/+9
2016-11-24netfilter: nat: switch to new rhlist interfaceFlorian Westphal1-16/+24
2016-11-24netfilter: nat: fix cmp return valueFlorian Westphal1-3/+6
2016-11-24netfilter: nft_hash: validate maximum value of u32 netlink hash attributeLaura Garcia Liebana1-2/+5
2016-11-09netfilter: nf_tables: fix oops when inserting an element into a verdict mapLiping Zhang1-0/+1
2016-11-09netfilter: conntrack: refine gc worker heuristicsFlorian Westphal1-8/+41
2016-11-09netfilter: conntrack: fix CT target for UNSPEC helpersFlorian Westphal1-3/+8
2016-11-09netfilter: connmark: ignore skbs with magic untracked conntrack objectsFlorian Westphal1-2/+2
2016-11-09ipvs: use IPVS_CMD_ATTR_MAX for family.maxattrWANG Cong1-1/+1
2016-10-31netfilter: nf_tables: destroy the set if fail to add transactionLiping Zhang1-1/+3
2016-10-28netfilter: ip_vs_sync: fix bogus maybe-uninitialized warningArnd Bergmann1-2/+5
2016-10-27netfilter: nf_tables: fix type mismatch with error return from nft_parse_u32_...John W. Linville1-1/+1
2016-10-27netfilter: nf_conntrack_sip: extend request line validationUlrich Weber1-1/+4
2016-10-27netfilter: nf_tables: fix race when create new element in dynsetLiping Zhang1-3/+12
2016-10-27netfilter: nf_tables: fix *leak* when expr clone failLiping Zhang4-14/+19
2016-10-27netfilter: nft_dynset: fix panic if NFT_SET_HASH is not enabledLiping Zhang1-0/+3
2016-10-20netfilter: fix nf_queue handlingPablo Neira Ayuso3-27/+36
2016-10-20netfilter: conntrack: restart gc immediately if GC_MAX_EVICTS is reachedNicolas Dichtel1-1/+1
2016-10-19netfilter: x_tables: suppress kmemcheck warningFlorian Westphal1-1/+1
2016-10-18netfilter: nf_tables: avoid uninitialized variable warningArnd Bergmann1-6/+4
2016-10-17netfilter: nft_range: validate operation netlink attributePablo Neira Ayuso1-1/+15
2016-10-17netfilter: nft_exthdr: fix error handling in nft_exthdr_init()Dan Carpenter1-1/+2
2016-10-17netfilter: nf_tables: underflow in nft_parse_u32_check()Dan Carpenter1-1/+1
2016-10-17netfilter: nft_hash: add missing NFTA_HASH_OFFSET's nla_policyLiping Zhang1-0/+1
2016-10-17netfilter: xt_ipcomp: add "ip[6]t_ipcomp" module alias nameLiping Zhang1-0/+2
2016-10-17netfilter: xt_NFLOG: fix unexpected truncated packetLiping Zhang1-0/+1
2016-10-17netfilter: nft_dynset: fix element timeout for HZ != 1000Anders K. Pedersen1-2/+4
2016-10-17netfilter: xt_hashlimit: Add missing ULL suffixes for 64-bit constantsGeert Uytterhoeven1-2/+2
2016-10-11netfilter: Fix slab corruption.Linus Torvalds1-75/+33
2016-10-04netfilter: nft_limit: fix divided by zero panicLiping Zhang1-2/+2
2016-10-04netfilter: fix namespace handling in nf_log_proc_dostringJann Horn1-2/+4
2016-09-30netfilter: xt_hashlimit: Fix link error in 32bit arch because of 64bit divisionVishwanath Pai1-7/+8