summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2022-09-15netfilter: nf_conntrack_irc: Fix forged IP logicDavid Leadbeater1-2/+3
2022-09-15netfilter: nf_tables: clean up hook list when offload flags check failsPablo Neira Ayuso1-1/+3
2022-09-15netfilter: conntrack: work around exceeded receive windowFlorian Westphal1-0/+31
2022-09-05netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to yGeert Uytterhoeven1-1/+0
2022-08-31net: Fix data-races around sysctl_[rw]mem_(max|default).Kuniyuki Iwashima1-2/+2
2022-08-31netfilter: flowtable: fix stuck flows on cleanup due to pending workPablo Neira Ayuso2-4/+11
2022-08-31netfilter: flowtable: add function to invoke garbage collection immediatelyPablo Neira Ayuso1-3/+9
2022-08-31netfilter: nf_tables: disallow binding to already bound chainPablo Neira Ayuso1-0/+2
2022-08-31netfilter: nf_tables: disallow jump to implicit chain from set elementPablo Neira Ayuso1-0/+4
2022-08-31netfilter: nf_tables: upfront validation of data via nft_data_init()Pablo Neira Ayuso5-113/+124
2022-08-31netfilter: bitwise: improve error goto labelsJeremy Sowden1-5/+6
2022-08-31netfilter: nft_cmp: optimize comparison for 16-bytesPablo Neira Ayuso2-2/+116
2022-08-31netfilter: nf_tables: consolidate rule verdict trace callPablo Neira Ayuso1-7/+32
2022-08-31netfilter: nft_tunnel: restrict it to netdev familyPablo Neira Ayuso1-0/+1
2022-08-31netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet familiesPablo Neira Ayuso1-3/+15
2022-08-31netfilter: nf_tables: do not leave chain stats enabled on errorPablo Neira Ayuso1-2/+4
2022-08-31netfilter: nft_payload: do not truncate csum_offset and csum_typePablo Neira Ayuso1-6/+13
2022-08-31netfilter: nft_payload: report ERANGE for too long offset and lengthPablo Neira Ayuso1-2/+8
2022-08-31netfilter: nf_tables: make table handle allocation per-netns friendlyPablo Neira Ayuso1-2/+1
2022-08-31netfilter: nf_tables: disallow updates of implicit chainPablo Neira Ayuso1-0/+3
2022-08-25netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specifiedPablo Neira Ayuso1-0/+5
2022-08-25netfilter: nf_tables: disallow NFT_SET_ELEM_CATCHALL and NFT_SET_ELEM_INTERVA...Pablo Neira Ayuso1-0/+3
2022-08-25netfilter: nf_tables: NFTA_SET_ELEM_KEY_END requires concat and interval flagsPablo Neira Ayuso1-0/+24
2022-08-25netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flagPablo Neira Ayuso1-4/+9
2022-08-25netfilter: nf_tables: really skip inactive sets when allocating namePablo Neira Ayuso1-1/+1
2022-08-25netfilter: nf_tables: possible module reference underflow in error pathPablo Neira Ayuso1-1/+1
2022-08-25netfilter: nf_tables: disallow NFTA_SET_ELEM_KEY_END with NFT_SET_ELEM_INTERV...Pablo Neira Ayuso1-0/+1
2022-08-25netfilter: nf_tables: use READ_ONCE and WRITE_ONCE for shared generation id a...Pablo Neira Ayuso1-7/+13
2022-08-17netfilter: nf_tables: fix null deref due to zeroed list headFlorian Westphal1-0/+1
2022-08-17netfilter: nf_tables: do not allow RULE_ID to refer to another chainThadeu Lima de Souza Cascardo1-2/+5
2022-08-17netfilter: nf_tables: do not allow CHAIN_ID to refer to another tableThadeu Lima de Souza Cascardo1-2/+4
2022-08-17netfilter: nf_tables: do not allow SET_ID to refer to another tableThadeu Lima de Souza Cascardo1-1/+3
2022-08-03netfilter: nf_queue: do not allow packet truncation below transport header of...Florian Westphal1-1/+6
2022-07-29net: netfilter: use kfree_drop_reason() for NF_DROPMenglong Dong1-1/+2
2022-07-29ip: Fix data-races around sysctl_ip_default_ttl.Kuniyuki Iwashima1-1/+1
2022-07-21netfilter: nf_tables: replace BUG_ON by element length checkPablo Neira Ayuso1-21/+51
2022-07-21netfilter: nf_log: incorrect offset to network headerPablo Neira Ayuso1-4/+4
2022-07-12netfilter: nft_payload: don't allow th access for fragmentsFlorian Westphal2-5/+6
2022-07-12netfilter: nft_payload: support for inner header matching / manglingPablo Neira Ayuso1-2/+54
2022-07-12netfilter: nf_tables: convert pktinfo->tprot_set to flags fieldPablo Neira Ayuso4-6/+6
2022-07-12netfilter: nf_tables: stricter validation of element dataPablo Neira Ayuso1-1/+8
2022-07-12netfilter: nft_set_pipapo: release elements in clone from abort pathPablo Neira Ayuso1-15/+33
2022-07-07netfilter: nft_dynset: restore set element counter when failing to updatePablo Neira Ayuso1-0/+2
2022-06-29netfilter: use get_random_u32 instead of prandomFlorian Westphal2-20/+5
2022-06-14netfilter: nf_tables: bail out early if hardware offload is not supportedPablo Neira Ayuso2-2/+23
2022-06-14netfilter: nf_tables: memleak flow rule from commit pathPablo Neira Ayuso1-0/+6
2022-06-14netfilter: nf_tables: release new hooks on unsupported flowtable flagsPablo Neira Ayuso1-4/+8
2022-06-14netfilter: nf_tables: always initialize flowtable hook list in transactionPablo Neira Ayuso1-0/+1
2022-06-14netfilter: nf_tables: delete flowtable hooks via transaction listPablo Neira Ayuso1-25/+6
2022-06-14netfilter: nf_tables: use kfree_rcu(ptr, rcu) to release hooks in clean_net pathPablo Neira Ayuso1-1/+1
generated by cgit v1.2.3 (git 2.39.0) at 2026-01-11 10:07:44 +0300