summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2018-06-16netfilter: nf_tables: fix NULL pointer dereference on nft_ct_helper_obj_dump()Taehee Yoo1-8/+12
2018-05-30ipvs: remove IPS_NAT_MASK check to fix passive FTPJulian Anastasov1-1/+1
2018-05-22netfilter: nf_tables: can't fail after linking rule into active rule listFlorian Westphal1-27/+32
2018-05-22netfilter: nf_tables: free set name in error pathFlorian Westphal1-3/+5
2018-05-16ipvs: fix rtnl_lock lockups caused by start_sync_threadJulian Anastasov2-83/+80
2018-04-26netfilter: x_tables: limit allocation requests for blob rule headsFlorian Westphal1-0/+3
2018-04-26netfilter: compat: reject huge allocation requestsFlorian Westphal1-8/+18
2018-04-26netfilter: compat: prepare xt_compat_init_offsets to return errorsFlorian Westphal1-1/+3
2018-04-26netfilter: x_tables: add counters allocation wrapperFlorian Westphal1-0/+15
2018-04-26netfilter: x_tables: cap allocations at 512 mbyteFlorian Westphal1-1/+2
2018-04-26netfilter: x_tables: fix pointer leaks to userspaceDmitry Vyukov5-2/+5
2018-04-19netfilter: ipset: Missing nfnl_lock()/nfnl_unlock() is added to ip_set_net_ex...Jozsef Kadlecsik1-0/+2
2018-04-08netfilter: x_tables: add and use xt_check_proc_nameFlorian Westphal3-9/+43
2018-04-08netfilter: x_tables: make allocation less aggressiveMichal Hocko1-1/+6
2018-03-15netfilter: IDLETIMER: be syzkaller friendlyEric Dumazet1-3/+6
2018-03-15netfilter: nat: cope with negative port rangePaolo Abeni1-2/+5
2018-03-15netfilter: x_tables: fix missing timer initialization in xt_LEDPaolo Abeni1-6/+6
2018-03-15netfilter: xt_hashlimit: fix lock imbalanceEric Dumazet1-1/+1
2018-03-03netfilter: nf_tables: fix potential NULL-ptr deref in nf_tables_dump_obj_done()Hangbin Liu1-2/+4
2018-03-03netfilter: nf_tables: fix chain filter in nf_tables_dump_rules()Pablo Neira Ayuso1-1/+1
2018-02-25netfilter: xt_bpf: add overflow checksJann Horn1-0/+6
2018-02-25netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insertCong Wang1-5/+17
2018-02-25netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1()Cong Wang1-0/+1
2018-02-25netfilter: x_tables: avoid out-of-bounds reads in xt_request_find_{match|target}Eric Dumazet1-0/+6
2018-02-25netfilter: x_tables: fix int overflow in xt_alloc_table_info()Dmitry Vyukov1-2/+1
2018-01-31netfilter: xt_osf: Add missing permission checksKevin Cernekee1-0/+7
2018-01-31netfilter: nfnetlink_cthelper: Add missing permission checksKevin Cernekee1-0/+10
2017-12-20netfilter: ipvs: Fix inappropriate output of procfsKUWAZAWA Takuya1-0/+4
2017-11-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netLinus Torvalds1-1/+0
2017-11-02License cleanup: add SPDX GPL-2.0 license identifier to files with no licenseGreg Kroah-Hartman8-0/+8
2017-10-25netfilter: nft_set_hash: disable fast_ops for 2-len keysAnatole Denis1-1/+0
2017-10-09netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1'Shmulik Ladkani1-2/+20
2017-10-06netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_...Eric Dumazet1-2/+2
2017-10-06netfilter: nf_tables: do not dump chain counters if not enabledPablo Neira Ayuso1-1/+1
2017-10-03netfilter: nf_tables: Release memory obtained by kasprintfArvind Yadav1-1/+3
2017-09-29netfilter: nf_tables: fix update chain errorJingPiao Chen1-2/+2
2017-09-29netfilter: ipset: Fix race between dump and swapRoss Lagerwall1-2/+5
2017-09-26netfilter: ipset: pernet ops must be unregistered lastFlorian Westphal1-9/+13
2017-09-26netfilter: ipset: Fix adding an IPv4 range containing more than 2^31 addressesJozsef Kadlecsik10-22/+24
2017-09-26netfilter: xt_socket: Restore mark from full sockets onlySubash Abhinov Kasiviswanathan1-2/+2
2017-09-26netfilter: ipvs: full-functionality option for ECN encapsulation in tunnelVadim Fedorenko1-2/+6
2017-09-18netfilter: ipset: ipset list may return wrong member count for set with timeoutVishwanath Pai1-1/+13
2017-09-18netfilter: nat: Do not use ARRAY_SIZE() on spinlocks to fix zero divGeert Uytterhoeven1-6/+6
2017-09-08netfilter: xt_hashlimit: fix build error caused by 64bit divisionVishwanath Pai1-5/+7
2017-09-08netfilter: xt_hashlimit: alloc hashtable with right sizeZhizhou Tian1-2/+2
2017-09-08netfilter: core: remove erroneous warn_onFlorian Westphal1-1/+1
2017-09-08netfilter: nat: use keyed locksFlorian Westphal1-12/+24
2017-09-08netfilter: nat: Revert "netfilter: nat: convert nat bysrc hash to rhashtable"Florian Westphal1-77/+53
2017-09-08netfilter: nf_nat: don't bug when mapping already existsFlorian Westphal1-1/+3
2017-09-08netfilter: ipvs: do not create conn for ABORT packet in sctp_conn_scheduleXin Long1-1/+2