summaryrefslogtreecommitdiffstats
path: root/net/netfilter
AgeCommit message (Expand)Author
2018-05-16ipvs: fix rtnl_lock lockups caused by start_sync_threadJulian Anastasov
2018-04-26netfilter: x_tables: limit allocation requests for blob rule headsFlorian Westphal
2018-04-26netfilter: compat: reject huge allocation requestsFlorian Westphal
2018-04-26netfilter: compat: prepare xt_compat_init_offsets to return errorsFlorian Westphal
2018-04-26netfilter: x_tables: add counters allocation wrapperFlorian Westphal
2018-04-26netfilter: x_tables: cap allocations at 512 mbyteFlorian Westphal
2018-04-26netfilter: x_tables: fix pointer leaks to userspaceDmitry Vyukov
2018-04-19netfilter: ipset: Missing nfnl_lock()/nfnl_unlock() is added to ip_set_net_ex...Jozsef Kadlecsik
2018-04-08netfilter: x_tables: add and use xt_check_proc_nameFlorian Westphal
2018-04-08netfilter: x_tables: make allocation less aggressiveMichal Hocko
2018-03-15netfilter: IDLETIMER: be syzkaller friendlyEric Dumazet
2018-03-15netfilter: nat: cope with negative port rangePaolo Abeni
2018-03-15netfilter: x_tables: fix missing timer initialization in xt_LEDPaolo Abeni
2018-03-15netfilter: xt_hashlimit: fix lock imbalanceEric Dumazet
2018-03-03netfilter: nf_tables: fix potential NULL-ptr deref in nf_tables_dump_obj_done()Hangbin Liu
2018-03-03netfilter: nf_tables: fix chain filter in nf_tables_dump_rules()Pablo Neira Ayuso
2018-02-25netfilter: xt_bpf: add overflow checksJann Horn
2018-02-25netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insertCong Wang
2018-02-25netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1()Cong Wang
2018-02-25netfilter: x_tables: avoid out-of-bounds reads in xt_request_find_{match|target}Eric Dumazet
2018-02-25netfilter: x_tables: fix int overflow in xt_alloc_table_info()Dmitry Vyukov
2018-01-31netfilter: xt_osf: Add missing permission checksKevin Cernekee
2018-01-31netfilter: nfnetlink_cthelper: Add missing permission checksKevin Cernekee
2017-12-20netfilter: ipvs: Fix inappropriate output of procfsKUWAZAWA Takuya
2017-11-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netLinus Torvalds
2017-11-02License cleanup: add SPDX GPL-2.0 license identifier to files with no licenseGreg Kroah-Hartman
2017-10-25netfilter: nft_set_hash: disable fast_ops for 2-len keysAnatole Denis
2017-10-09netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1'Shmulik Ladkani
2017-10-06netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_...Eric Dumazet
2017-10-06netfilter: nf_tables: do not dump chain counters if not enabledPablo Neira Ayuso
2017-10-03netfilter: nf_tables: Release memory obtained by kasprintfArvind Yadav
2017-09-29netfilter: nf_tables: fix update chain errorJingPiao Chen
2017-09-29netfilter: ipset: Fix race between dump and swapRoss Lagerwall
2017-09-26netfilter: ipset: pernet ops must be unregistered lastFlorian Westphal
2017-09-26netfilter: ipset: Fix adding an IPv4 range containing more than 2^31 addressesJozsef Kadlecsik
2017-09-26netfilter: xt_socket: Restore mark from full sockets onlySubash Abhinov Kasiviswanathan
2017-09-26netfilter: ipvs: full-functionality option for ECN encapsulation in tunnelVadim Fedorenko
2017-09-18netfilter: ipset: ipset list may return wrong member count for set with timeoutVishwanath Pai
2017-09-18netfilter: nat: Do not use ARRAY_SIZE() on spinlocks to fix zero divGeert Uytterhoeven
2017-09-08netfilter: xt_hashlimit: fix build error caused by 64bit divisionVishwanath Pai
2017-09-08netfilter: xt_hashlimit: alloc hashtable with right sizeZhizhou Tian
2017-09-08netfilter: core: remove erroneous warn_onFlorian Westphal
2017-09-08netfilter: nat: use keyed locksFlorian Westphal
2017-09-08netfilter: nat: Revert "netfilter: nat: convert nat bysrc hash to rhashtable"Florian Westphal
2017-09-08netfilter: nf_nat: don't bug when mapping already existsFlorian Westphal
2017-09-08netfilter: ipvs: do not create conn for ABORT packet in sctp_conn_scheduleXin Long
2017-09-08netfilter: ipvs: fix the issue that sctp_conn_schedule drops non-INIT packetXin Long
2017-09-06Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds
2017-09-04netfilter: nf_tables: support for recursive chain deletionPablo Neira Ayuso
2017-09-04netfilter: nf_tables: use NLM_F_NONREC for deletion requestsPablo Neira Ayuso