summaryrefslogtreecommitdiffstats
path: root/net/netfilter/nft_exthdr.c
Commit message (Expand)AuthorAgeFilesLines
* netfilter: nf_tables: fix 'exist' matching on bigendian archesFlorian Westphal2023-12-061-2/+2
* netfilter: nftables: exthdr: fix 4-byte stack OOB writeFlorian Westphal2023-09-061-8/+14
* netfilter: nft_exthdr: Fix non-linear header modificationXiao Liang2023-08-301-12/+8
* netfilter: nf_tables: limit allowed range via nla_policyFlorian Westphal2023-06-261-2/+2
* netfilter: nft_exthdr: add boolean DCCP option matchingJeremy Sowden2023-05-181-0/+106
* sctp: move SCTP_PAD4 and SCTP_TRUNC4 to linux/sctp.hXin Long2022-11-171-1/+0
* netfilter: nf_tables: Extend nft_expr_ops::dump callback parametersPhil Sutter2022-11-151-3/+6
* netfilter: nf_tables: use correct integer typesFlorian Westphal2022-07-111-5/+5
* netfilter: nft_exthdr: add reduce supportFlorian Westphal2022-03-201-0/+33
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2022-02-101-1/+1
|\
| * netfilter: nft_payload: don't allow th access for fragmentsFlorian Westphal2022-02-041-1/+1
* | netfilter: exthdr: add support for tcp option removalFlorian Westphal2022-02-041-1/+95
|/
* netfilter: nft_exthdr: break evaluation if setting TCP option failsPablo Neira Ayuso2021-12-081-4/+7
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2021-06-291-0/+3
|\
| * netfilter: nft_exthdr: check for IPv6 packet before further processingPablo Neira Ayuso2021-06-161-0/+3
* | netfilter: nft_extdhr: Drop pointless check of tprot_setPhil Sutter2021-06-161-1/+1
* | netfilter: nft_exthdr: Search chunks in SCTP packets onlyPhil Sutter2021-06-161-1/+4
* | netfilter: nft_exthdr: Fix for unsafe packet data readPhil Sutter2021-06-091-1/+3
* | netfilter: nf_tables: add and use nft_thoff helperFlorian Westphal2021-05-291-4/+4
* | netfilter: nft_exthdr: Support SCTP chunksPhil Sutter2021-05-281-0/+51
|/
* netfilter: nftables: add nft_parse_register_store() and use itPablo Neira Ayuso2021-01-271-4/+4
* netfilter: nftables: add nft_parse_register_load() and use itPablo Neira Ayuso2021-01-271-3/+3
* netfilter: nf_tables: nft_exthdr: the presence return value should be little-...Stephen Suryaputra2020-08-101-2/+2
* netfilter: nft_exthdr: fix endianness of tcp option castSergey Marinkevich2020-03-301-5/+3
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextPablo Neira Ayuso2019-06-251-4/+1
|\
| * Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2019-06-221-4/+1
| |\
| | * treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500Thomas Gleixner2019-06-191-4/+1
* | | netfilter: nf_tables: add support for matching IPv4 optionsStephen Suryaputra2019-06-211-0/+133
|/ /
* / netfilter: nf_tables: prefer skb_ensure_writableFlorian Westphal2019-05-311-1/+2
|/
* netfilter: nf_tables: merge exthdr expression into nft coreFlorian Westphal2018-04-271-21/+2
* netfilter: exthdr: add missign attributes to policyFlorian Westphal2017-12-111-0/+2
* netfilter: fix a few (harmless) sparse warningsFlorian Westphal2017-08-281-1/+1
* netfilter: exthdr: tcp option set supportFlorian Westphal2017-08-191-2/+162
* netfilter: exthdr: split netlink dump functionFlorian Westphal2017-08-191-5/+11
* netfilter: exthdr: factor out tcp option accessFlorian Westphal2017-08-191-12/+21
* netfilter: Remove exceptional & on function nameArushi Singhal2017-04-071-1/+1
* netfilter: nft_exthdr: Allow checking TCP option presence, tooPhil Sutter2017-03-061-3/+10
* netfilter: nft_exthdr: add TCP option matchingManuel Messner2017-02-081-13/+106
* netfilter: nft_exthdr: Add support for existence checkPhil Sutter2017-02-081-2/+20
* netfilter: nft_exthdr: fix error handling in nft_exthdr_init()Dan Carpenter2016-10-171-1/+2
* netfilter: nf_tables: validate maximum value of u32 netlink attributesLaura Garcia Liebana2016-09-231-5/+7
* netfilter: nft_exthdr: Add size check on u8 nft_exthdr attributesLaura Garcia Liebana2016-08-101-2/+9
* netfilter: nf_tables: switch registers to 32 bit addressingPatrick McHardy2015-04-131-1/+2
* netfilter: nf_tables: add register parsing/dumping helpersPatrick McHardy2015-04-131-2/+2
* netfilter: nf_tables: convert expressions to u32 register pointersPatrick McHardy2015-04-131-2/+2
* netfilter: nf_tables: get rid of NFT_REG_VERDICT usagePatrick McHardy2015-04-131-3/+3
* netfilter: nf_tables: kill nft_validate_output_register()Patrick McHardy2015-04-131-5/+1
* netfilter: nf_tables: rename nft_validate_data_load()Patrick McHardy2015-04-131-2/+2
* netfilter: nf_tables: validate len in nft_validate_data_load()Patrick McHardy2015-04-131-4/+2
* netfilter: nft_exthdr: call ipv6_find_hdr() with explicitly initialized offsetDaniel Borkmann2013-12-201-1/+1