summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: nf_tables: wait for rcu grace period on net_device removalPablo Neira Ayuso2024-11-071-7/+34
* netfilter: nft_payload: sanitize offset and length before calling skb_checksum()Pablo Neira Ayuso2024-10-311-0/+3
* netfilter: Fix use-after-free in get_info()Dong Chenchen2024-10-301-1/+1
* Merge tag 'net-6.12-rc5' of git://git.kernel.org/pub/scm/linux/kernel/git/net...Linus Torvalds2024-10-244-2/+7
|\
| * netfilter: xtables: fix typo causing some targets not to load on IPv6Pablo Neira Ayuso2024-10-213-2/+3
| * netfilter: bpf: must hold reference on net namespaceFlorian Westphal2024-10-171-0/+4
* | Merge tag 'bpf-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpfLinus Torvalds2024-10-181-1/+2
|\ \ | |/ |/|
| * bpf: Fix link info netfilter flags to populate defrag flagTyrone Wu2024-10-161-1/+2
* | netfilter: xtables: avoid NFPROTO_UNSPEC where neededFlorian Westphal2024-10-0916-165/+422
* | move asm/unaligned.h to linux/unaligned.hAl Viro2024-10-026-6/+6
* | netfilter: nfnetlink_queue: remove old clash resolution logicFlorian Westphal2024-09-262-86/+0
* | netfilter: nf_tables: missing objects with no memcg accountingPablo Neira Ayuso2024-09-267-15/+17
* | netfilter: nf_tables: use rcu chain hook list iterator from netlink dump pathPablo Neira Ayuso2024-09-261-1/+1
* | netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_E...Simon Horman2024-09-261-5/+2
* | netfilter: nf_tables: Keep deleted flowtable hooks until after RCUPhil Sutter2024-09-261-1/+1
* | netfilter: ctnetlink: Guard possible unused functionsAndy Shevchenko2024-09-261-1/+1
* | netfilter: conntrack: add clash resolution for reverse collisionsFlorian Westphal2024-09-261-5/+51
* | netfilter: nf_nat: don't try nat source port reallocation for reverse dir clashFlorian Westphal2024-09-261-2/+118
|/
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2024-09-151-2/+2
|\
| * netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtre...Dan Carpenter2024-09-151-2/+2
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2024-09-123-7/+49
|\|
| * net: netfilter: move nf flowtable bpf initialization in nf_flow_table_module_...Lorenzo Bianconi2024-09-122-1/+7
| * netfilter: nft_socket: make cgroupsv2 matching work with namespacesFlorian Westphal2024-09-121-3/+38
| * netfilter: nft_socket: fix sk refcount leaksFlorian Westphal2024-09-121-3/+4
* | netfilter: nft_flow_offload: Unmask upper DSCP bits in nft_flow_route()Ido Schimmel2024-09-091-1/+2
* | Merge tag 'nf-next-24-09-06' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski2024-09-0626-148/+165
|\ \
| * | netfilter: nf_tables: set element timeout update supportPablo Neira Ayuso2024-09-032-5/+44
| * | netfilter: nf_tables: zero timeout means element never times outPablo Neira Ayuso2024-09-032-17/+25
| * | netfilter: nf_tables: consolidate timeout extension for elementsPablo Neira Ayuso2024-09-032-34/+22
| * | netfilter: nf_tables: annotate data-races around element expirationPablo Neira Ayuso2024-09-032-2/+2
| * | netfilter: nft_dynset: annotate data-races around set timeoutPablo Neira Ayuso2024-09-031-3/+3
| * | netfilter: nf_tables: remove annotation to access set timeout while holding lockPablo Neira Ayuso2024-09-031-2/+2
| * | netfilter: nf_tables: reject expiration higher than timeoutPablo Neira Ayuso2024-09-031-0/+3
| * | netfilter: nf_tables: reject element expiration with no timeoutPablo Neira Ayuso2024-09-031-0/+3
| * | netfilter: nf_tables: elements with timeout below CONFIG_HZ never expirePablo Neira Ayuso2024-09-031-1/+1
| * | netfilter: nf_tables: drop unused 3rd argument from validate callback opsFlorian Westphal2024-09-0321-46/+23
| * | netfilter: conntrack: Convert to use ERR_CAST()Shen Lichuan2024-09-031-1/+1
| * | netfilter: Use kmemdup_array instead of kmemdup for multiple allocationYan Zhen2024-09-031-1/+1
| * | netfilter: nft_counter: Use u64_stats_t for statistic.Sebastian Andrzej Siewior2024-09-031-44/+46
| * | netfilter: ctnetlink: support CTA_FILTER for flushChangliang Wu2024-09-031-6/+3
* | | net/netfilter: make use of the helper macro LIST_HEAD()Hongbo Li2024-09-061-3/+1
|/ /
* | Merge tag 'nf-next-24-08-23' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski2024-08-2625-70/+125
|\ \ | |/ |/|
| * netfilter: nf_tables: don't initialize registers in nft_do_chain()Florian Westphal2024-08-201-1/+1
| * netfilter: nf_tables: allow loads only when register is initializedFlorian Westphal2024-08-201-4/+34
| * netfilter: nf_tables: pass context structure to nft_parse_register_loadFlorian Westphal2024-08-2020-32/+33
| * netfilter: move nf_ct_netns_get out of nf_conncount_initXin Long2024-08-192-14/+16
| * netfilter: nf_tables: do not remove elements if set backend implements .abortPablo Neira Ayuso2024-08-191-1/+4
| * netfilter: nf_tables: store new sets in dedicated listFlorian Westphal2024-08-191-9/+20
| * netfilter: nfnetlink: convert kfree_skb to consume_skbDonald Hunter2024-08-191-7/+7
| * netfilter: nfnetlink_queue: unbreak SCTP trafficAntonio Ojea2024-08-191-2/+10