summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: conntrack: Use consistent ct id hash calculationDirk Morris2019-11-221-8/+8
* netfilter: ctnetlink: don't use conntrack/expect object addresses as idFlorian Westphal2019-08-132-5/+65
* ipv4: hash net ptr into fragmentation bucket selectionHannes Frederic Sowa2019-08-131-2/+3
* netfilter: nf_tables: fix flush after rule deletion in the same batchPablo Neira Ayuso2019-05-021-0/+3
* netfilter: nft_compat: use-after-free when deleting targetsPablo Neira Ayuso2019-05-021-1/+2
* netfilter: nf_tables: nft_compat: fix refcount leak on xt moduleFlorian Westphal2019-05-021-34/+58
* netfilter: nft_compat: fix crash when related match/target module is removedLiping Zhang2019-05-021-23/+20
* netfilter: nf_tables: fix use-after-free when deleting compat expressionsFlorian Westphal2019-02-112-3/+5
* netfilter: nf_tables: fix oob accessFlorian Westphal2019-02-111-1/+1
* netfilter: nf_tables: don't use position attribute on rule replacementFlorian Westphal2019-02-111-9/+6
* netfilter: xt_IDLETIMER: add sysfs filename checking routineTaehee Yoo2019-02-111-0/+20
* netfilter: x_tables: add and use xt_check_proc_nameFlorian Westphal2019-02-113-5/+36
* netfilter: nf_tables: fix register orderingFlorian Westphal2018-12-161-1/+7
* netfilter: nft_set: fix allocation size overflow in privsize callback.Taehee Yoo2018-12-163-3/+3
* netfilter: nf_log: don't hold nf_log_mutex during user accessJann Horn2018-11-201-3/+6
* netfilter: nf_queue: augment nfqa_cfg_policyEric Dumazet2018-11-201-0/+3
* ipvs: fix buffer overflow with sync daemon and serviceJulian Anastasov2018-10-212-8/+17
* ipvs: fix stats update from local clientsJulian Anastasov2018-10-211-0/+8
* netfilter: nf_tables: can't fail after linking rule into active rule listFlorian Westphal2018-10-211-27/+32
* netfilter: IDLETIMER: be syzkaller friendlyEric Dumazet2018-06-161-3/+6
* netfilter: nat: cope with negative port rangePaolo Abeni2018-06-161-2/+5
* netfilter: x_tables: fix missing timer initialization in xt_LEDPaolo Abeni2018-06-161-6/+6
* netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insertCong Wang2018-06-161-5/+17
* netfilter: xt_bpf: add overflow checksJann Horn2018-03-031-1/+5
* netfilter: xt_TCPMSS: add more sanity tests on tcph->doffEric Dumazet2018-02-131-1/+5
* netfilter: xt_osf: Add missing permission checksKevin Cernekee2018-01-011-0/+7
* netfilter: nfnetlink_cthelper: Add missing permission checksKevin Cernekee2018-01-011-0/+10
* netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_...Eric Dumazet2018-01-011-2/+2
* netfilter: ipset: pernet ops must be unregistered lastFlorian Westphal2018-01-011-9/+14
* netfilter; Add some missing default cases to switch statements in nft_reject.David S. Miller2017-11-111-0/+2
* netfilter: Fix switch statement warnings with recent gcc.David Miller2017-11-112-3/+11
* ipv6: Add rt6_get_cookie() functionMartin KaFai Lau2017-11-111-1/+1
* netfilter: ctnetlink: fix incorrect nf_ct_put during hash resizeLiping Zhang2017-09-151-1/+6
* netfilter: ctnetlink: make it safer when updating ct->statusLiping Zhang2017-08-261-6/+21
* netfilter: ctnetlink: fix deadlock due to acquire _expect_lock twiceLiping Zhang2017-08-261-19/+14
* netfilter: nft_log: restrict the log prefix length to 127Liping Zhang2017-03-162-2/+2
* netfilter: nfnetlink: correctly validate length of batch messagesPhil Turnbull2017-02-231-4/+5
* netfilter: nf_tables: destroy the set if fail to add transactionLiping Zhang2017-02-231-1/+3
* netfilter: nf_tables: fix type mismatch with error return from nft_parse_u32_...John W. Linville2017-02-231-1/+1
* netfilter: nf_conntrack_sip: extend request line validationUlrich Weber2017-02-231-1/+4
* netfilter: nf_tables: underflow in nft_parse_u32_check()Dan Carpenter2017-02-231-1/+1
* netfilter: nf_tables: validate maximum value of u32 netlink attributesLaura Garcia Liebana2017-02-236-7/+57
* netfilter: nft_exthdr: Add size check on u8 nft_exthdr attributesLaura Garcia Liebana2017-02-231-2/+9
* netfilter: restart search if moved to other chainFlorian Westphal2017-02-231-0/+7
* netfilter: nfnetlink_queue: reject verdict request from different portidLiping Zhang2016-11-201-4/+2
* netfilter: nf_ct_expect: remove the redundant slash when policy name is emptyLiping Zhang2016-11-201-1/+1
* netfilter: x_tables: speed up jump target validationFlorian Westphal2016-11-201-0/+50
* netfilter: x_tables: introduce and use xt_copy_counters_from_userFlorian Westphal2016-08-221-0/+74
* netfilter: x_tables: do compat validation via translate_tableFlorian Westphal2016-08-221-0/+8
* netfilter: x_tables: xt_compat_match_from_user doesn't need a retvalFlorian Westphal2016-08-221-3/+2
generated by cgit v1.2.3 (git 2.25.1) at 2024-08-07 11:07:38 +0000