summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2019-07-31net: make skb_dst_force return true when dst is refcountedFlorian Westphal1-1/+5
2019-07-31ipvs: fix tinfo memory leak in start_sync_threadJulian Anastasov2-66/+72
2019-07-31ipvs: defer hook registration to avoid leaksJulian Anastasov1-7/+14
2019-07-31ipset: Fix memory accounting for hash types on resizeStefano Brivio1-1/+1
2019-06-22ipvs: Fix use-after-free in ip_vs_inYueHaibing1-1/+1
2019-06-22netfilter: nf_queue: fix reinject verdict handlingJagdish Motwani1-0/+1
2019-05-16netfilter: nf_tables: warn when expr implements only one of activate/deactivateFlorian Westphal1-0/+19
2019-05-16netfilter: ctnetlink: don't use conntrack/expect object addresses as idFlorian Westphal2-5/+64
2019-05-16ipvs: do not schedule icmp errors from tunnelsJulian Anastasov1-1/+1
2019-05-16netfilter: compat: initialize all fields in xt_initFrancesco Ruggeri1-1/+1
2019-05-04netfilter: nft_set_rbtree: check for inactive element after flag mismatchPablo Neira Ayuso1-4/+3
2019-05-02ipvs: fix warning on unused variableAndrea Claudi1-1/+2
2019-04-20netfilter: xt_cgroup: shrink size of v2 pathPablo Neira Ayuso1-0/+72
2019-04-05netfilter: physdev: relax br_netfilter dependencyFlorian Westphal1-2/+7
2019-04-05netfilter: conntrack: fix cloned unconfirmed skb->_nfct race in __nf_conntrac...Chieh-Min Wang1-3/+11
2019-03-23ipvs: fix dependency on nf_defrag_ipv6Andrea Claudi3-6/+15
2019-03-14netfilter: nf_nat: skip nat clash resolution for same-origin entriesMartynas Pumputis1-0/+16
2019-03-14ipvs: Fix signed integer overflow when setsockopt timeoutZhangXiaoxu1-0/+12
2019-02-27netfilter: nft_compat: use-after-free when deleting targetsPablo Neira Ayuso1-1/+2
2019-02-27netfilter: nf_tables: fix flush after rule deletion in the same batchPablo Neira Ayuso1-0/+3
2019-02-27netfilter: nf_tables: fix leaking object reference countTaehee Yoo1-0/+2
2019-01-13netfilter: nat: can't use dst_hold on noref dstFlorian Westphal1-1/+2
2019-01-13netfilter: ipset: do not call ipset_nest_end after nla_nest_cancelPan Bian1-1/+1
2019-01-13netfilter: seqadj: re-load tcp header pointer after possible head reallocationFlorian Westphal1-3/+4
2019-01-09netfilter: nf_conncount: don't skip eviction when age is negativeFlorian Westphal1-1/+1
2019-01-09netfilter: nf_conncount: fix garbage collection confirm raceFlorian Westphal1-5/+47
2019-01-09netfilter: nf_conncount: Fix garbage collection with zonesYi-Hung Wei1-4/+9
2019-01-09netfilter: nf_conncount: expose connection list interfacePablo Neira Ayuso1-13/+23
2019-01-09netfilter: xt_connlimit: don't store address in the conn nodesFlorian Westphal1-6/+2
2018-12-21netfilter: ipset: Fix wraparound in hash:*net* typesJozsef Kadlecsik6-63/+63
2018-12-17netfilter: nf_tables: deactivate expressions in rule replecement routineTaehee Yoo1-11/+4
2018-12-17ipvs: call ip_vs_dst_notifier earlier than ipv6_dev_notfXin Long1-0/+3
2018-12-17netfilter: xt_hashlimit: fix a possible memory leak in htable_create()Taehee Yoo1-6/+3
2018-12-17netfilter: nf_tables: fix use-after-free when deleting compat expressionsFlorian Westphal2-3/+5
2018-11-27netfilter: xt_IDLETIMER: add sysfs filename checking routineTaehee Yoo1-0/+20
2018-11-27netfilter: ipset: actually allow allowable CIDR 0 in hash:net,port,netEric Westbrook1-4/+4
2018-11-27netfilter: ipset: list:set: Decrease refcount synchronously on deletion and r...Stefano Brivio2-18/+22
2018-11-21netfilter: conntrack: fix calculation of next bucket number in early_dropVasily Khoruzhick1-5/+8
2018-10-10netfilter: nf_tables: release chain in flushing setTaehee Yoo1-0/+1
2018-10-10netfilter: xt_cluster: add dependency on conntrack moduleMartin Willi1-1/+13
2018-09-15netfilter: fix memory leaks on netlink_dump_start errorFlorian Westphal2-25/+30
2018-09-15ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()Tan Hu1-4/+11
2018-09-05netfilter: nf_tables: don't allow to rename to already-pending nameFlorian Westphal1-13/+29
2018-09-05netfilter: nf_tables: fix memory leaks on chain renameFlorian Westphal1-6/+11
2018-09-05netfilter: nft_set_hash: add rcu_barrier() in the nft_rhash_destroy()Taehee Yoo1-0/+1
2018-08-24netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior stateFlorian Westphal1-4/+4
2018-08-24netfilter: nf_conntrack: Fix possible possible crash on module loading.Andrey Ryabinin1-1/+1
2018-08-24netfilter: nft_compat: explicitly reject ERROR and standard targetFlorian Westphal1-0/+13
2018-08-24netfilter: nf_log: fix uninit read in nf_log_proc_dostringJann Horn1-0/+4
2018-08-24netfilter: nf_ct_helper: Fix possible panic after nf_conntrack_helper_unregisterGao Feng1-0/+5