summaryrefslogtreecommitdiffstats
path: root/net/netfilter
AgeCommit message (Expand)Author
2017-02-23netfilter: nfnetlink: correctly validate length of batch messagesPhil Turnbull
2017-02-23netfilter: nf_tables: destroy the set if fail to add transactionLiping Zhang
2017-02-23netfilter: nf_tables: fix type mismatch with error return from nft_parse_u32_...John W. Linville
2017-02-23netfilter: nf_conntrack_sip: extend request line validationUlrich Weber
2017-02-23netfilter: nf_tables: underflow in nft_parse_u32_check()Dan Carpenter
2017-02-23netfilter: nf_tables: validate maximum value of u32 netlink attributesLaura Garcia Liebana
2017-02-23netfilter: nft_exthdr: Add size check on u8 nft_exthdr attributesLaura Garcia Liebana
2017-02-23netfilter: restart search if moved to other chainFlorian Westphal
2016-11-20netfilter: nfnetlink_queue: reject verdict request from different portidLiping Zhang
2016-11-20netfilter: nf_ct_expect: remove the redundant slash when policy name is emptyLiping Zhang
2016-11-20netfilter: x_tables: speed up jump target validationFlorian Westphal
2016-08-22netfilter: x_tables: introduce and use xt_copy_counters_from_userFlorian Westphal
2016-08-22netfilter: x_tables: do compat validation via translate_tableFlorian Westphal
2016-08-22netfilter: x_tables: xt_compat_match_from_user doesn't need a retvalFlorian Westphal
2016-08-22netfilter: x_tables: don't reject valid target size on some architecturesFlorian Westphal
2016-08-22netfilter: x_tables: validate all offsets and sizes in a ruleFlorian Westphal
2016-08-22netfilter: x_tables: check for bogus target offsetFlorian Westphal
2016-08-22netfilter: x_tables: check standard target size tooFlorian Westphal
2016-08-22netfilter: x_tables: add compat version of xt_check_entry_offsetsFlorian Westphal
2016-08-22netfilter: x_tables: assert minimum target sizeFlorian Westphal
2016-08-22netfilter: x_tables: add and use xt_check_entry_offsetsFlorian Westphal
2016-06-15nf_conntrack: avoid kernel pointer value leak in slab nameLinus Torvalds
2016-05-01ipvs: correct initial offset of Call-ID header search in SIP persistence engineMarco Angaroni
2015-12-18netfilter: nf_tables: fix bogus warning in nft_data_uninit()Mirek Kratochvil
2015-12-13netfilter: nfnetlink: don't probe module if it existsFlorian Westphal
2015-10-19netfilter: nft_compat: skip family comparison in case of NFPROTO_UNSPECPablo Neira Ayuso
2015-09-30netlink, mmap: fix edge-case leakages in nf queue zero-copyDaniel Borkmann
2015-08-25netfilter: nf_conntrack: Support expectations in different zonesJoe Stringer
2015-08-25ipvs: fix crash with sync protocol v0 and FTPJulian Anastasov
2015-08-25ipvs: fix crash if scheduler is changedJulian Anastasov
2015-08-25ipvs: do not use random local source address for tunnelsJulian Anastasov
2015-08-25netfilter: ctnetlink: put back references to master ct and expect objectsPablo Neira Ayuso
2015-07-20netfilter: nfnetlink_cthelper: Remove 'const' and '&' to avoid warningsChen Gang
2015-07-15netfilter: nf_qeueue: Drop queue entries on nf_unregister_hookEric W. Biederman
2015-06-02ipvs: fix memory leak in ip_vs_ctl.cTommi Rantala
2015-05-20netfilter: nft_rbtree: fix lockingPatrick McHardy
2015-05-20netfilter: nf_tables: allow to change chain policy without hook if it existsPablo Neira Ayuso
2015-05-20netfilter: nft_compat: set IP6T_F_PROTO flag if protocol is setPablo Neira Ayuso
2015-05-20netfilter: nf_tables: check for overflow of rule dlen fieldPatrick McHardy
2015-05-20netfilter: Zero the tuple in nfnl_cthelper_parse_tuple()Ian Wilson
2015-05-20netfilter: nf_tables: fix error handling of rule replacementPablo Neira Ayuso
2015-05-20net: make skb_gso_segment error handling more robustFlorian Westphal
2015-03-12ipvs: add missing ip_vs_pe_put in sync codeJulian Anastasov
2015-03-12netfilter: xt_socket: fix a stack corruption bugEric Dumazet
2015-03-12netfilter: nft_compat: fix module refcount underflowPablo Neira Ayuso
2015-03-12ipvs: rerouting to local clients is not needed anymoreJulian Anastasov
2015-03-12netfilter: nf_tables: fix leaks in error path of nf_tables_newchain()Pablo Neira Ayuso
2015-03-12netfilter: nf_tables: disable preemption when restoring chain countersPablo Neira Ayuso
2015-02-02netfilter: nfnetlink: validate nfnetlink header from batchPablo Neira Ayuso
2015-02-02ipvs: uninitialized data with IP_VS_IPV6Dan Carpenter