summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: nfnetlink: correctly validate length of batch messagesPhil Turnbull2017-02-231-4/+5
* netfilter: nf_tables: destroy the set if fail to add transactionLiping Zhang2017-02-231-1/+3
* netfilter: nf_tables: fix type mismatch with error return from nft_parse_u32_...John W. Linville2017-02-231-1/+1
* netfilter: nf_conntrack_sip: extend request line validationUlrich Weber2017-02-231-1/+4
* netfilter: nf_tables: underflow in nft_parse_u32_check()Dan Carpenter2017-02-231-1/+1
* netfilter: nf_tables: validate maximum value of u32 netlink attributesLaura Garcia Liebana2017-02-236-7/+57
* netfilter: nft_exthdr: Add size check on u8 nft_exthdr attributesLaura Garcia Liebana2017-02-231-2/+9
* netfilter: restart search if moved to other chainFlorian Westphal2017-02-231-0/+7
* netfilter: nfnetlink_queue: reject verdict request from different portidLiping Zhang2016-11-201-4/+2
* netfilter: nf_ct_expect: remove the redundant slash when policy name is emptyLiping Zhang2016-11-201-1/+1
* netfilter: x_tables: speed up jump target validationFlorian Westphal2016-11-201-0/+50
* netfilter: x_tables: introduce and use xt_copy_counters_from_userFlorian Westphal2016-08-221-0/+74
* netfilter: x_tables: do compat validation via translate_tableFlorian Westphal2016-08-221-0/+8
* netfilter: x_tables: xt_compat_match_from_user doesn't need a retvalFlorian Westphal2016-08-221-3/+2
* netfilter: x_tables: don't reject valid target size on some architecturesFlorian Westphal2016-08-221-2/+2
* netfilter: x_tables: validate all offsets and sizes in a ruleFlorian Westphal2016-08-221-5/+76
* netfilter: x_tables: check for bogus target offsetFlorian Westphal2016-08-221-2/+15
* netfilter: x_tables: check standard target size tooFlorian Westphal2016-08-221-0/+15
* netfilter: x_tables: add compat version of xt_check_entry_offsetsFlorian Westphal2016-08-221-0/+22
* netfilter: x_tables: assert minimum target sizeFlorian Westphal2016-08-221-0/+3
* netfilter: x_tables: add and use xt_check_entry_offsetsFlorian Westphal2016-08-221-0/+34
* nf_conntrack: avoid kernel pointer value leak in slab nameLinus Torvalds2016-06-151-1/+3
* ipvs: correct initial offset of Call-ID header search in SIP persistence engineMarco Angaroni2016-05-011-1/+1
* netfilter: nf_tables: fix bogus warning in nft_data_uninit()Mirek Kratochvil2015-12-181-2/+2
* netfilter: nfnetlink: don't probe module if it existsFlorian Westphal2015-12-131-1/+1
* netfilter: nft_compat: skip family comparison in case of NFPROTO_UNSPECPablo Neira Ayuso2015-10-191-6/+18
* netlink, mmap: fix edge-case leakages in nf queue zero-copyDaniel Borkmann2015-09-301-2/+3
* netfilter: nf_conntrack: Support expectations in different zonesJoe Stringer2015-08-251-1/+2
* ipvs: fix crash with sync protocol v0 and FTPJulian Anastasov2015-08-251-1/+1
* ipvs: fix crash if scheduler is changedJulian Anastasov2015-08-253-37/+69
* ipvs: do not use random local source address for tunnelsJulian Anastasov2015-08-251-1/+0
* netfilter: ctnetlink: put back references to master ct and expect objectsPablo Neira Ayuso2015-08-251-5/+0
* netfilter: nfnetlink_cthelper: Remove 'const' and '&' to avoid warningsChen Gang2015-07-201-2/+2
* netfilter: nf_qeueue: Drop queue entries on nf_unregister_hookEric W. Biederman2015-07-154-1/+42
* ipvs: fix memory leak in ip_vs_ctl.cTommi Rantala2015-06-021-0/+3
* netfilter: nft_rbtree: fix lockingPatrick McHardy2015-05-201-4/+2
* netfilter: nf_tables: allow to change chain policy without hook if it existsPablo Neira Ayuso2015-05-201-1/+4
* netfilter: nft_compat: set IP6T_F_PROTO flag if protocol is setPablo Neira Ayuso2015-05-201-0/+6
* netfilter: nf_tables: check for overflow of rule dlen fieldPatrick McHardy2015-05-201-0/+4
* netfilter: Zero the tuple in nfnl_cthelper_parse_tuple()Ian Wilson2015-05-201-0/+3
* netfilter: nf_tables: fix error handling of rule replacementPablo Neira Ayuso2015-05-201-6/+0
* net: make skb_gso_segment error handling more robustFlorian Westphal2015-05-201-1/+1
* ipvs: add missing ip_vs_pe_put in sync codeJulian Anastasov2015-03-121-0/+3
* netfilter: xt_socket: fix a stack corruption bugEric Dumazet2015-03-121-9/+12
* netfilter: nft_compat: fix module refcount underflowPablo Neira Ayuso2015-03-121-2/+10
* ipvs: rerouting to local clients is not needed anymoreJulian Anastasov2015-03-121-11/+22
* netfilter: nf_tables: fix leaks in error path of nf_tables_newchain()Pablo Neira Ayuso2015-03-121-2/+6
* netfilter: nf_tables: disable preemption when restoring chain countersPablo Neira Ayuso2015-03-121-0/+2
* netfilter: nfnetlink: validate nfnetlink header from batchPablo Neira Ayuso2015-02-021-1/+2
* ipvs: uninitialized data with IP_VS_IPV6Dan Carpenter2015-02-021-5/+5
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-22 11:24:16 +0000