kernel/linux.git - Linux kernel stable tree (mirror)

Age	Commit message (Expand)	Author	Files	Lines
2023-08-16	netfilter: nf_tables: report use refcount overflow	Pablo Neira Ayuso	4	-75/+118
2023-08-11	netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHA...	Pablo Neira Ayuso	1	-2/+3
2023-08-11	netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR	Pablo Neira Ayuso	1	-9/+18
2023-08-11	netfilter: nftables: add helper function to validate set element data	Pablo Neira Ayuso	1	-4/+11
2023-08-11	netfilter: nft_set_rbtree: fix overlap expiration walk	Florian Westphal	1	-6/+14
2023-07-27	netfilter: nf_tables: skip bound chain on rule flush	Pablo Neira Ayuso	1	-0/+2
2023-07-27	netfilter: nf_tables: skip bound chain in netns release path	Pablo Neira Ayuso	1	-0/+3
2023-07-27	netfilter: nft_set_pipapo: fix improper element removal	Florian Westphal	1	-1/+5
2023-07-27	netfilter: nf_tables: can't schedule in nft_chain_validate	Florian Westphal	1	-2/+2
2023-07-27	netfilter: nf_tables: fix spurious set element insertion failure	Florian Westphal	1	-0/+3
2023-07-27	netfilter: nf_tables: prevent OOB access in nft_byteorder_eval	Thadeu Lima de Souza Cascardo	1	-7/+7
2023-07-27	netfilter: nf_tables: do not ignore genmask when looking up chain by id	Thadeu Lima de Souza Cascardo	1	-4/+7
2023-07-27	netfilter: conntrack: Avoid nf_ct_helper_hash uses after free	Florent Revest	1	-0/+4
2023-07-27	netfilter: nf_tables: fix scheduling-while-atomic splat	Florian Westphal	1	-4/+0
2023-07-27	netfilter: nf_tables: unbind non-anonymous set if rule construction fails	Pablo Neira Ayuso	1	-0/+2
2023-07-27	netfilter: nf_tables: drop map element references from preparation phase	Pablo Neira Ayuso	5	-23/+113
2023-07-27	netfilter: nftables: rename set element data activation/deactivation functions	Pablo Neira Ayuso	1	-11/+11
2023-07-27	netfilter: nf_tables: reject unbound chain set before commit phase	Pablo Neira Ayuso	1	-0/+13
2023-07-27	netfilter: nf_tables: reject unbound anonymous set before commit phase	Pablo Neira Ayuso	1	-3/+31
2023-07-27	netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain	Pablo Neira Ayuso	2	-7/+41
2023-07-27	netfilter: nf_tables: fix chain binding transaction logic	Pablo Neira Ayuso	2	-40/+133
2023-07-27	netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE	Pablo Neira Ayuso	1	-1/+2
2023-07-27	netfilter: nf_tables: add rescheduling points during loop detection walks	Florian Westphal	1	-0/+6
2023-07-27	netfilter: nf_tables: use net_generic infra for transaction data	Florian Westphal	4	-160/+269
2023-07-27	netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return va...	Ilia.Gavrilov	1	-1/+1
2023-07-27	netfilter: conntrack: dccp: copy entire header to stack buffer, not just basi...	Florian Westphal	1	-3/+49
2023-06-28	netfilter: nf_tables: hold mutex on netns pre_exit path	Pablo Neira Ayuso	1	-0/+2
2023-06-28	netfilter: nf_tables: validate registers coming from userspace.	Pablo Neira Ayuso	1	-14/+17
2023-06-28	netfilter: nftables: statify nft_parse_register()	Pablo Neira Ayuso	1	-2/+1
2023-06-28	netfilter: nfnetlink_osf: fix module autoload	Pablo Neira Ayuso	2	-1/+1
2023-06-28	netfilter: nf_tables: disallow element updates of bound anonymous sets	Pablo Neira Ayuso	1	-2/+5
2023-06-28	netfilter: nft_set_pipapo: .walk does not deal with generations	Pablo Neira Ayuso	1	-1/+5
2023-06-28	ipvs: align inner_mac_header for encapsulation	Terin Stock	1	-0/+2
2023-06-21	netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM	Pablo Neira Ayuso	1	-1/+2
2023-06-21	Remove DECnet support from kernel	Stephen Hemminger	1	-10/+0
2023-06-14	netfilter: ipset: Add schedule point in call_ad().	Kuniyuki Iwashima	1	-0/+8
2023-06-14	netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelper	Tijs Van Buggenhout	1	-0/+3
2023-06-09	netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with C...	Tom Rix	1	-0/+4
2023-06-05	netfilter: ctnetlink: Support offloaded conntrack entry deletion	Paul Blakey	1	-8/+0
2023-05-30	netfilter: nft_set_rbtree: fix null deref on element insertion	Florian Westphal	1	-7/+13
2023-05-30	ipvs: Update width of source for ip_vs_sync_conn_options	Simon Horman	1	-1/+1
2023-05-30	netfilter: conntrack: fix possible bug_on with enable_hooks=1	Florian Westphal	2	-3/+6
2023-05-17	netfilter: nf_tables: deactivate anonymous set from preparation phase	Pablo Neira Ayuso	4	-3/+15
2023-05-17	netfilter: nf_tables: don't write table validation state without mutex	Florian Westphal	2	-8/+2
2023-03-22	netfilter: nft_redir: correct value of inet type `.maxattrs`	Jeremy Sowden	1	-1/+1
2023-03-22	netfilter: nft_redir: correct length for loading protocol registers	Jeremy Sowden	1	-1/+1
2023-03-22	netfilter: nft_masq: correct length for loading protocol registers	Jeremy Sowden	1	-1/+1
2023-03-22	netfilter: nft_nat: correct length for loading protocol registers	Jeremy Sowden	1	-1/+1
2023-03-17	netfilter: ctnetlink: revert to dumping mark regardless of event type	Ivan Delalande	1	-7/+7
2023-03-11	netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()	Hangyu Hua	1	-1/+4