aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter
AgeCommit message (Expand)Author
2019-09-23Merge tag 'v4.18.44' into v4.18/standard/baseBruce Ashfield
2019-09-16ipvs: defer hook registration to avoid leaksJulian Anastasov
2019-09-16ipvs: Fix use-after-free in ip_vs_inYueHaibing
2019-09-16netfilter: nf_queue: fix reinject verdict handlingJagdish Motwani
2019-09-16netfilter: nf_flow_table: fix netdev refcnt leakTaehee Yoo
2019-09-16netfilter: nf_flow_table: check ttl value in flow offload data pathTaehee Yoo
2019-09-16netfilter: nf_conntrack_h323: restore boundary check correctnessJakub Jankowski
2019-09-16netfilter: nf_flow_table: fix missing error check for rhashtable_insert_fastTaehee Yoo
2019-06-03Merge tag 'v4.18.40' into v4.18/standard/baseBruce Ashfield
2019-05-30netfilter: nf_tables: use-after-free in dynamic operationsPablo Neira Ayuso
2019-05-30netfilter: fix nf_l4proto_log_invalid to log invalid packetsAndrei Vagin
2019-05-30netfilter: nf_tables: prevent shift wrap in nft_chain_parse_hook()Dan Carpenter
2019-05-30netfilter: ctnetlink: don't use conntrack/expect object addresses as idFlorian Westphal
2019-05-30ipvs: do not schedule icmp errors from tunnelsJulian Anastasov
2019-05-29Merge tag 'v4.18.39' into v4.18/standard/baseBruce Ashfield
2019-05-23netfilter: nft_set_rbtree: check for inactive element after flag mismatchPablo Neira Ayuso
2019-05-21Merge tag 'v4.18.38' into v4.18/standard/baseBruce Ashfield
2019-05-15netfilter: nf_tables: warn when expr implements only one of activate/deactivateFlorian Westphal
2019-05-06Merge tag 'v4.18.36' into v4.18/standard/baseBruce Ashfield
2019-05-05netfilter: nf_flow_table: remove flowtable hook flush routine in netns exit r...Taehee Yoo
2019-05-05netfilter: xt_cgroup: shrink size of v2 pathPablo Neira Ayuso
2019-04-16Merge tag 'v4.18.35' into v4.18/standard/baseBruce Ashfield
2019-04-12netfilter: physdev: relax br_netfilter dependencyFlorian Westphal
2019-04-12netfilter: conntrack: fix cloned unconfirmed skb->_nfct race in __nf_conntrac...Chieh-Min Wang
2019-04-12netfilter: conntrack: tcp: only close if RST matches exact sequenceFlorian Westphal
2019-04-12netfilter: nf_tables: check the result of dereferencing base_chain->statsLi RongQing
2019-03-28Merge tag 'v4.18.33' into v4.18/standard/baseBruce Ashfield
2019-03-26ipvs: fix warning on unused variableAndrea Claudi
2019-03-26ipvs: fix dependency on nf_defrag_ipv6Andrea Claudi
2019-03-26netfilter: compat: initialize all fields in xt_initFrancesco Ruggeri
2019-03-21Merge tag 'v4.18.32' into v4.18/standard/baseBruce Ashfield
2019-03-20netfilter: xt_TEE: add missing code to get interface index in checkentry.Taehee Yoo
2019-03-20netfilter: xt_TEE: fix wrong interface selectionTaehee Yoo
2019-03-20netfilter: nf_nat: skip nat clash resolution for same-origin entriesMartynas Pumputis
2019-03-20ipvs: Fix signed integer overflow when setsockopt timeoutZhangXiaoxu
2019-03-17Merge tag 'v4.18.30' into v4.18/standard/baseBruce Ashfield
2019-03-08netfilter: nf_tables: fix flush after rule deletion in the same batchPablo Neira Ayuso
2019-03-08netfilter: nft_flow_offload: fix checking method of conntrack helperHenry Yen
2019-03-08netfilter: nft_flow_offload: fix interaction with vrf slave devicewenxu
2019-03-08netfilter: nft_flow_offload: Fix reverse route lookupwenxu
2019-03-08netfilter: nf_tables: fix leaking object reference countTaehee Yoo
2019-02-05Merge tag 'v4.18.27' into v4.18/standard/baseBruce Ashfield
2019-02-05netfilter: ipset: Allow matching on destination MAC address for mac and ipmac...Stefano Brivio
2019-02-05netfilter: nf_conncount: don't skip eviction when age is negativeFlorian Westphal
2019-02-03Merge tag 'v3.18.26' into v4.18/standard/baseBruce Ashfield
2019-01-30netfilter: nft_socket: Break evaluation if no socket foundMáté Eckl
2019-01-30netfilter: nft_tproxy: Move nf_tproxy_assign_sock() to nf_tproxy.hMáté Eckl
2019-01-30netfilter: nf_tables: don't prevent event handler from device cleanup on netn...Florian Westphal
2019-01-21Merge tag 'v4.18.25' into v4.18/standard/baseBruce Ashfield
2019-01-14netfilter: nat: can't use dst_hold on noref dstFlorian Westphal