summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* nf_conntrack: avoid kernel pointer value leak in slab nameLinus Torvalds2016-05-171-1/+3
* ipvs: fix crash with sync protocol v0 and FTPJulian Anastasov2015-10-271-1/+1
* ipvs: skb_orphan in case of forwardingAlex Gartrell2015-10-271-0/+27
* ipvs: fix crash if scheduler is changedJulian Anastasov2015-10-273-37/+69
* ipvs: do not use random local source address for tunnelsJulian Anastasov2015-10-271-1/+0
* netfilter: nf_log: don't zap all loggers on unregisterFlorian Westphal2015-10-271-2/+6
* netfilter: nf_log: Introduce nft_log_dereference() macroMarcelo Leitner2015-10-271-12/+9
* netfilter: nft_compat: skip family comparison in case of NFPROTO_UNSPECPablo Neira Ayuso2015-10-271-6/+26
* netfilter: nf_log: wait for rcu grace after logger unregistrationPablo Neira Ayuso2015-10-271-0/+1
* netfilter: ctnetlink: put back references to master ct and expect objectsPablo Neira Ayuso2015-10-271-5/+0
* netfilter: nf_conntrack: Support expectations in different zonesJoe Stringer2015-10-271-1/+2
* netfilter: nfnetlink: work around wrong endianess in res_id fieldPablo Neira Ayuso2015-10-271-1/+7
* netfilter: nf_tables: allow to change chain policy without hook if it existsPablo Neira Ayuso2015-07-131-1/+4
* netfilter: nft_compat: set IP6T_F_PROTO flag if protocol is setPablo Neira Ayuso2015-07-131-0/+6
* netfilter: Zero the tuple in nfnl_cthelper_parse_tuple()Ian Wilson2015-07-131-0/+3
* netfilter: nfnetlink_cthelper: Remove 'const' and '&' to avoid warningsChen Gang2015-07-121-2/+2
* netfilter: nf_qeueue: Drop queue entries on nf_unregister_hookEric W. Biederman2015-07-054-1/+42
* netfilter: x_tables: fix cgroup matching on non-full sksDaniel Borkmann2015-06-281-1/+1
* ipvs: uninitialized data with IP_VS_IPV6Dan Carpenter2015-01-291-5/+5
* netfilter: conntrack: fix race between confirmation and flushPablo Neira Ayuso2015-01-291-11/+9
* netfilter: nfnetlink: relax strict multicast group check from netlink_bindPablo Neira Ayuso2015-01-291-1/+1
* netfilter: nf_tables: fix flush ruleset chain dependenciesPablo Neira Ayuso2015-01-291-5/+9
* netfilter: nfnetlink: validate nfnetlink header from batchPablo Neira Ayuso2015-01-291-1/+2
* Revert "netfilter: conntrack: fix race in __nf_conntrack_confirm against get_...Pablo Neira2014-11-251-8/+6
* netfilter: nfnetlink: fix insufficient validation in nfnetlink_bindPablo Neira Ayuso2014-11-171-1/+11
* netfilter: conntrack: fix race in __nf_conntrack_confirm against get_next_corpsebill bonaparte2014-11-141-6/+8
* netfilter: nf_tables: restore synchronous object release from commit/abortPablo Neira Ayuso2014-11-121-16/+8
* netfilter: nft_compat: use the match->table to validate dependenciesPablo Neira Ayuso2014-11-121-2/+2
* netfilter: nft_compat: relax chain type validationPablo Neira Ayuso2014-11-121-30/+2
* netfilter: nft_compat: use current net namespacePablo Neira Ayuso2014-11-121-2/+2
* ipvs: Keep skb->sk when allocating headroom on tunnel xmitCalvin Owens2014-11-121-0/+2
* netfilter: ipset: small potential read beyond the end of bufferDan Carpenter2014-11-111-0/+6
* ipvs: Avoid null-pointer deref in debug codeAlex Gartrell2014-10-281-2/+2
* netfilter: nft_compat: fix wrong target lookup in nft_target_select_ops()Arturo Borrero2014-10-271-1/+1
* netfilter: nf_log: release skbuff on nlmsg put failureHoucheng Lin2014-10-241-9/+8
* netfilter: nfnetlink_log: fix maximum packet length logged to userspaceFlorian Westphal2014-10-241-3/+5
* netfilter: nf_log: account for size of NLMSG_DONE attributeFlorian Westphal2014-10-241-3/+3
* netfilter: nf_tables: check for NULL in nf_tables_newchain pcpu stats allocationSabrina Dubroca2014-10-221-2/+2
* netfilter: ipset: off by one in ip_set_nfnl_get_byindex()Dan Carpenter2014-10-221-1/+1
* netfilter: nf_conntrack: allow server to become a client in TW handlingMarcelo Leitner2014-10-221-2/+2
* net: make skb_gso_segment error handling more robustFlorian Westphal2014-10-201-1/+1
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller2014-10-204-41/+150
|\
| * netfilter: nft_nat: dump attributes if they are setPablo Neira Ayuso2014-10-181-9/+11
| * netfilter: nft_nat: NFTA_NAT_REG_ADDR_MAX depends on NFTA_NAT_REG_ADDR_MINPablo Neira Ayuso2014-10-181-22/+28
| * netfilter: nft_nat: insufficient attribute validationPablo Neira Ayuso2014-10-181-1/+3
| * netfilter: nft_compat: validate chain type in match/targetPablo Neira Ayuso2014-10-181-9/+66
| * netfilter: nft_compat: fix hook validation for non-base chainsPablo Neira Ayuso2014-10-141-0/+4
| * netfilter: nf_tables: restrict nat/masq expressions to nat chain typePablo Neira Ayuso2014-10-133-0/+38
* | netfilter: replace strnicmp with strncasecmpRasmus Villemoes2014-10-145-18/+18
|/
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2014-10-101-6/+4
|\
generated by cgit v1.2.3 (git 2.25.1) at 2025-04-09 01:16:40 +0000