summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2018-11-21netfilter: conntrack: fix calculation of next bucket number in early_dropVasily Khoruzhick1-5/+8
2018-10-10netfilter: nf_tables: release chain in flushing setTaehee Yoo1-0/+1
2018-10-10netfilter: xt_cluster: add dependency on conntrack moduleMartin Willi1-1/+13
2018-09-15netfilter: fix memory leaks on netlink_dump_start errorFlorian Westphal2-25/+30
2018-09-15ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()Tan Hu1-4/+11
2018-09-05netfilter: nf_tables: don't allow to rename to already-pending nameFlorian Westphal1-13/+29
2018-09-05netfilter: nf_tables: fix memory leaks on chain renameFlorian Westphal1-6/+11
2018-09-05netfilter: nft_set_hash: add rcu_barrier() in the nft_rhash_destroy()Taehee Yoo1-0/+1
2018-08-24netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior stateFlorian Westphal1-4/+4
2018-08-24netfilter: nf_conntrack: Fix possible possible crash on module loading.Andrey Ryabinin1-1/+1
2018-08-24netfilter: nft_compat: explicitly reject ERROR and standard targetFlorian Westphal1-0/+13
2018-08-24netfilter: nf_log: fix uninit read in nf_log_proc_dostringJann Horn1-0/+4
2018-08-24netfilter: nf_ct_helper: Fix possible panic after nf_conntrack_helper_unregisterGao Feng1-0/+5
2018-08-03netfilter: nf_tables: check msg_type before nft_trans_set(trans)Alexey Kodanev1-5/+6
2018-08-03netfilter: ipset: forbid family for hash:mac setsFlorent Fourcot1-1/+4
2018-07-17netfilter: nf_queue: augment nfqa_cfg_policyEric Dumazet1-0/+3
2018-07-11netfilter: nf_log: don't hold nf_log_mutex during user accessJann Horn1-3/+6
2018-07-08ipvs: fix buffer overflow with sync daemon and serviceJulian Anastasov1-6/+15
2018-07-08netfilter: nft_limit: fix packet ratelimitingPablo Neira Ayuso1-14/+24
2018-07-08netfilter: nf_tables: use WARN_ON_ONCE instead of BUG_ON in nft_do_chain()Taehee Yoo1-1/+2
2018-07-08netfilter: nf_tables: fix NULL-ptr in nf_tables_dump_obj()Taehee Yoo1-1/+1
2018-07-08netfilter: nf_tables: add missing netlink attrs to policiesFlorian Westphal1-0/+3
2018-07-08netfilter: nf_tables: fix memory leak on error exit returnColin Ian King1-2/+4
2018-07-08netfilter: nf_tables: increase nft_counters_enabled in nft_chain_stats_replace()Taehee Yoo1-1/+3
2018-07-08netfilter: nf_tables: disable preemption in nft_update_chain_stats()Pablo Neira Ayuso1-2/+2
2018-07-08netfilter: nft_meta: fix wrong value dereference in nft_meta_set_evalTaehee Yoo1-6/+8
2018-07-08netfilter: nf_tables: bogus EBUSY in chain deletionsPablo Neira Ayuso2-7/+54
2018-07-08netfilter: nf_tables: don't assume chain stats are set when jumplabel is setFlorian Westphal1-7/+14
2018-07-08netfilter: nft_compat: fix handling of large matchinfo sizeFlorian Westphal1-1/+63
2018-07-08netfilter: nft_compat: prepare for indirect info storageFlorian Westphal1-11/+36
2018-07-08netfilter: nf_tables: nft_compat: fix refcount leak on xt moduleFlorian Westphal1-34/+58
2018-06-20netfilter: nf_tables: fix out-of-bounds in nft_chain_commit_updateTaehee Yoo1-1/+1
2018-06-16netfilter: nf_tables: fix NULL pointer dereference on nft_ct_helper_obj_dump()Taehee Yoo1-8/+12
2018-05-30ipvs: remove IPS_NAT_MASK check to fix passive FTPJulian Anastasov1-1/+1
2018-05-22netfilter: nf_tables: can't fail after linking rule into active rule listFlorian Westphal1-27/+32
2018-05-22netfilter: nf_tables: free set name in error pathFlorian Westphal1-3/+5
2018-05-16ipvs: fix rtnl_lock lockups caused by start_sync_threadJulian Anastasov2-83/+80
2018-04-26netfilter: x_tables: limit allocation requests for blob rule headsFlorian Westphal1-0/+3
2018-04-26netfilter: compat: reject huge allocation requestsFlorian Westphal1-8/+18
2018-04-26netfilter: compat: prepare xt_compat_init_offsets to return errorsFlorian Westphal1-1/+3
2018-04-26netfilter: x_tables: add counters allocation wrapperFlorian Westphal1-0/+15
2018-04-26netfilter: x_tables: cap allocations at 512 mbyteFlorian Westphal1-1/+2
2018-04-26netfilter: x_tables: fix pointer leaks to userspaceDmitry Vyukov5-2/+5
2018-04-19netfilter: ipset: Missing nfnl_lock()/nfnl_unlock() is added to ip_set_net_ex...Jozsef Kadlecsik1-0/+2
2018-04-08netfilter: x_tables: add and use xt_check_proc_nameFlorian Westphal3-9/+43
2018-04-08netfilter: x_tables: make allocation less aggressiveMichal Hocko1-1/+6
2018-03-15netfilter: IDLETIMER: be syzkaller friendlyEric Dumazet1-3/+6
2018-03-15netfilter: nat: cope with negative port rangePaolo Abeni1-2/+5
2018-03-15netfilter: x_tables: fix missing timer initialization in xt_LEDPaolo Abeni1-6/+6
2018-03-15netfilter: xt_hashlimit: fix lock imbalanceEric Dumazet1-1/+1