summaryrefslogtreecommitdiffstats
path: root/net/netfilter
AgeCommit message (Expand)Author
2019-06-15netfilter: nf_flow_table: fix netdev refcnt leakTaehee Yoo
2019-06-15netfilter: nf_flow_table: check ttl value in flow offload data pathTaehee Yoo
2019-06-15netfilter: nf_tables: fix base chain stat rcu_dereference usageFlorian Westphal
2019-06-15netfilter: nf_conntrack_h323: restore boundary check correctnessJakub Jankowski
2019-06-15netfilter: nf_flow_table: fix missing error check for rhashtable_insert_fastTaehee Yoo
2019-06-04jump_label: move 'asm goto' support test to KconfigMasahiro Yamada
2019-05-16netfilter: nf_tables: add missing ->release_ops() in error path of newrule()Taehee Yoo
2019-05-16netfilter: nf_tables: use-after-free in dynamic operationsPablo Neira Ayuso
2019-05-16netfilter: fix nf_l4proto_log_invalid to log invalid packetsAndrei Vagin
2019-05-16netfilter: nf_tables: prevent shift wrap in nft_chain_parse_hook()Dan Carpenter
2019-05-16netfilter: ctnetlink: don't use conntrack/expect object addresses as idFlorian Westphal
2019-05-16ipvs: do not schedule icmp errors from tunnelsJulian Anastasov
2019-05-04netfilter: fix NETFILTER_XT_TARGET_TEE dependenciesArnd Bergmann
2019-05-04netfilter: nft_set_rbtree: check for inactive element after flag mismatchPablo Neira Ayuso
2019-05-02ipvs: fix warning on unused variableAndrea Claudi
2019-05-02netfilter: nf_tables: bogus EBUSY in helper removal from transactionPablo Neira Ayuso
2019-05-02netfilter: nf_tables: bogus EBUSY when deleting set after flushPablo Neira Ayuso
2019-05-02netfilter: nf_tables: fix set double-free in abort pathPablo Neira Ayuso
2019-05-02netfilter: nft_compat: use .release_ops and remove list of extensionPablo Neira Ayuso
2019-05-02netfilter: nft_compat: don't use refcount_inc on newly allocated entryFlorian Westphal
2019-05-02netfilter: nf_tables: unbind set in rule from commit pathPablo Neira Ayuso
2019-05-02netfilter: nf_tables: warn when expr implements only one of activate/deactivateFlorian Westphal
2019-05-02netfilter: nft_compat: destroy function must not have side effectsFlorian Westphal
2019-05-02netfilter: nf_tables: split set destruction in deactivate and destroy phaseFlorian Westphal
2019-05-02netfilter: nft_compat: make lists per netnsFlorian Westphal
2019-05-02netfilter: nft_compat: use refcnt_t type for nft_xt reference countFlorian Westphal
2019-04-20netfilter: nf_flow_table: remove flowtable hook flush routine in netns exit r...Taehee Yoo
2019-04-20netfilter: xt_cgroup: shrink size of v2 pathPablo Neira Ayuso
2019-04-17netfilter: nfnetlink_cttimeout: fetch timeouts for udplite and gre, tooFlorian Westphal
2019-04-17netfilter: nfnetlink_cttimeout: pass default timeout policy to obj_to_nlattrPablo Neira Ayuso
2019-04-05netfilter: physdev: relax br_netfilter dependencyFlorian Westphal
2019-04-05netfilter: conntrack: fix cloned unconfirmed skb->_nfct race in __nf_conntrac...Chieh-Min Wang
2019-04-05netfilter: conntrack: tcp: only close if RST matches exact sequenceFlorian Westphal
2019-04-05netfilter: nf_tables: check the result of dereferencing base_chain->statsLi RongQing
2019-03-23ipvs: fix dependency on nf_defrag_ipv6Andrea Claudi
2019-03-23netfilter: compat: initialize all fields in xt_initFrancesco Ruggeri
2019-03-13netfilter: xt_TEE: add missing code to get interface index in checkentry.Taehee Yoo
2019-03-13netfilter: xt_TEE: fix wrong interface selectionTaehee Yoo
2019-03-13netfilter: nf_nat: skip nat clash resolution for same-origin entriesMartynas Pumputis
2019-03-13ipvs: Fix signed integer overflow when setsockopt timeoutZhangXiaoxu
2019-02-27netfilter: nfnetlink_osf: add missing fmatch checkFernando Fernandez Mancera
2019-02-27netfilter: nft_compat: use-after-free when deleting targetsPablo Neira Ayuso
2019-02-27netfilter: nf_tables: fix flush after rule deletion in the same batchPablo Neira Ayuso
2019-02-27netfilter: nft_flow_offload: fix checking method of conntrack helperHenry Yen
2019-02-27netfilter: nft_flow_offload: fix interaction with vrf slave devicewenxu
2019-02-27netfilter: nft_flow_offload: Fix reverse route lookupwenxu
2019-02-27netfilter: nf_tables: fix leaking object reference countTaehee Yoo
2019-01-26netfilter: ipset: Allow matching on destination MAC address for mac and ipmac...Stefano Brivio
2019-01-22netfilter: nf_conncount: fix argument order to find_next_bitFlorian Westphal
2019-01-22netfilter: nf_conncount: speculative garbage collection on empty listsPablo Neira Ayuso