summaryrefslogtreecommitdiffstats
path: root/net/netfilter
AgeCommit message (Expand)Author
2020-04-23netfilter: nf_tables: report EOPNOTSUPP on unsupported flags/object typePablo Neira Ayuso
2020-04-02netfilter: nft_fwd_netdev: validate family and chain typePablo Neira Ayuso
2020-04-02netfilter: flowtable: reload ip{v6}h in nf_flow_tuple_ip{v6}Haishuang Yan
2020-03-18netfilter: nft_tunnel: add missing attribute validation for tunnelsJakub Kicinski
2020-03-18netfilter: nft_payload: add missing attribute validation for payload csum flagsJakub Kicinski
2020-03-18netfilter: cthelper: add missing attribute validation for cthelperJakub Kicinski
2020-03-18netfilter: x_tables: xt_mttg_seq_next should increase position indexVasily Averin
2020-03-18netfilter: xt_recent: recent_seq_next should increase position indexVasily Averin
2020-03-18netfilter: synproxy: synproxy_cpu_seq_next should increase position indexVasily Averin
2020-03-18netfilter: nf_conntrack: ct_cpu_seq_next should increase position indexVasily Averin
2020-03-05netfilter: nft_tunnel: no need to call htons() when dumping portsXin Long
2020-02-28netfilter: xt_hashlimit: limit the max size of hashtableCong Wang
2020-02-24netfilter: nft_tunnel: add the missing ERSPAN_VERSION nla_policyXin Long
2020-02-05netfilter: nft_tunnel: ERSPAN_VERSION must not be nullFlorian Westphal
2020-01-29netfilter: nf_tables: add __nft_chain_type_get()Pablo Neira Ayuso
2020-01-29netfilter: ipset: use bitmap infrastructure completelyKadlecsik József
2020-01-29netfilter: nft_osf: add missing check for DREG attributeFlorian Westphal
2020-01-27netfilter: ctnetlink: honor IPS_OFFLOAD flagPablo Neira Ayuso
2020-01-27netfilter: nft_flow_offload: add entry to flowtable after confirmationPablo Neira Ayuso
2020-01-27netfilter: nft_set_hash: bogus element self comparison from deactivation pathPablo Neira Ayuso
2020-01-27netfilter: nft_set_hash: fix lookups with fixed size hash on big endianPablo Neira Ayuso
2020-01-27netfilter: nf_flow_table: do not remove offload when other netns's interface ...Taehee Yoo
2020-01-27netfilter: nft_osf: usage from output path is not validFernando Fernandez Mancera
2020-01-23netfilter: nf_tables: fix flowtable list del corruptionFlorian Westphal
2020-01-23netfilter: nf_tables: store transaction list locally while requesting modulePablo Neira Ayuso
2020-01-23netfilter: nf_tables: remove WARN and add NLA_STRING upper limitsFlorian Westphal
2020-01-23netfilter: nft_tunnel: fix null-attribute checkFlorian Westphal
2020-01-23netfilter: fix a use-after-free in mtype_destroy()Cong Wang
2020-01-14netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is presentFlorian Westphal
2020-01-14netfilter: conntrack: dccp, sctp: handle null timeout argumentFlorian Westphal
2020-01-12netfilter: nf_tables: validate NFT_DATA_VALUE after nft_data_init()Pablo Neira Ayuso
2020-01-12netfilter: nf_tables: validate NFT_SET_ELEM_INTERVAL_ENDPablo Neira Ayuso
2020-01-12netfilter: nft_set_rbtree: bogus lookup/get on consecutive elements in named ...Pablo Neira Ayuso
2020-01-12netfilter: ctnetlink: netns exit must wait for callbacksFlorian Westphal
2020-01-09netfilter: nft_tproxy: Fix port selector on Big EndianPhil Sutter
2020-01-04net: add bool confirm_neigh parameter for dst_ops.update_pmtuHangbin Liu
2020-01-04netfilter: nf_queue: enqueue skbs with NULL dstMarco Oliverio
2019-12-13netfilter: nf_tables: don't use position attribute on rule replacementFlorian Westphal
2019-12-05netfilter: nf_tables: fix a missing check of nla_put_failureKangjie Lu
2019-12-05netfilter: nf_nat_sip: fix RTP/RTCP source port translationsAlin Nastac
2019-11-24netfilter: nft_compat: do not dump private areaPablo Neira Ayuso
2019-11-20netfilter: nf_tables: avoid BUG_ON usageFlorian Westphal
2019-11-12netfilter: ipset: Copy the right MAC address in hash:ip,mac IPv6 setsStefano Brivio
2019-11-12ipvs: move old_secure_tcp into struct netns_ipvsEric Dumazet
2019-11-12ipvs: don't ignore errors in case refcounting ip_vs module failsDavide Caratti
2019-11-12netfilter: nf_flow_table: set timeout before insertion into hashesPablo Neira Ayuso
2019-11-12netfilter: ipset: Fix an error code in ip_set_sockfn_get()Dan Carpenter
2019-11-06netfilter: ipset: Make invalid MAC address checks consistentStefano Brivio
2019-10-29netfilter: nft_connlimit: disable bh on garbage collectionPablo Neira Ayuso
2019-10-11netfilter: nf_tables: allow lookups in dynamic setsFlorian Westphal