summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: nf_tables: allow lookups in dynamic setsFlorian Westphal2019-10-112-5/+5
* netfilter: nf_conntrack_ftp: Fix debug outputThomas Jarosch2019-09-211-1/+1
* netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_infoJuliana Rodrigueiro2019-09-211-11/+25
* netfilter: ipset: Fix rename concurrency with listingJozsef Kadlecsik2019-08-291-1/+1
* netfilter: conntrack: Use consistent ct id hash calculationDirk Morris2019-08-251-8/+8
* netfilter: nft_hash: fix symhash with modulus oneLaura Garcia Liebana2019-08-161-1/+1
* netfilter: nfnetlink: avoid deadlock due to synchronous request_moduleFlorian Westphal2019-08-161-1/+1
* net: make skb_dst_force return true when dst is refcountedFlorian Westphal2019-07-311-1/+5
* ipvs: fix tinfo memory leak in start_sync_threadJulian Anastasov2019-07-312-66/+72
* ipvs: defer hook registration to avoid leaksJulian Anastasov2019-07-311-7/+14
* ipset: Fix memory accounting for hash types on resizeStefano Brivio2019-07-311-1/+1
* ipvs: Fix use-after-free in ip_vs_inYueHaibing2019-06-221-1/+1
* netfilter: nf_queue: fix reinject verdict handlingJagdish Motwani2019-06-221-0/+1
* netfilter: nf_tables: warn when expr implements only one of activate/deactivateFlorian Westphal2019-05-161-0/+19
* netfilter: ctnetlink: don't use conntrack/expect object addresses as idFlorian Westphal2019-05-162-5/+64
* ipvs: do not schedule icmp errors from tunnelsJulian Anastasov2019-05-161-1/+1
* netfilter: compat: initialize all fields in xt_initFrancesco Ruggeri2019-05-161-1/+1
* netfilter: nft_set_rbtree: check for inactive element after flag mismatchPablo Neira Ayuso2019-05-041-4/+3
* ipvs: fix warning on unused variableAndrea Claudi2019-05-021-1/+2
* netfilter: xt_cgroup: shrink size of v2 pathPablo Neira Ayuso2019-04-201-0/+72
* netfilter: physdev: relax br_netfilter dependencyFlorian Westphal2019-04-051-2/+7
* netfilter: conntrack: fix cloned unconfirmed skb->_nfct race in __nf_conntrac...Chieh-Min Wang2019-04-051-3/+11
* ipvs: fix dependency on nf_defrag_ipv6Andrea Claudi2019-03-233-6/+15
* netfilter: nf_nat: skip nat clash resolution for same-origin entriesMartynas Pumputis2019-03-131-0/+16
* ipvs: Fix signed integer overflow when setsockopt timeoutZhangXiaoxu2019-03-131-0/+12
* netfilter: nft_compat: use-after-free when deleting targetsPablo Neira Ayuso2019-02-271-1/+2
* netfilter: nf_tables: fix flush after rule deletion in the same batchPablo Neira Ayuso2019-02-271-0/+3
* netfilter: nf_tables: fix leaking object reference countTaehee Yoo2019-02-271-0/+2
* netfilter: nat: can't use dst_hold on noref dstFlorian Westphal2019-01-131-1/+2
* netfilter: ipset: do not call ipset_nest_end after nla_nest_cancelPan Bian2019-01-131-1/+1
* netfilter: seqadj: re-load tcp header pointer after possible head reallocationFlorian Westphal2019-01-131-3/+4
* netfilter: nf_conncount: don't skip eviction when age is negativeFlorian Westphal2019-01-091-1/+1
* netfilter: nf_conncount: fix garbage collection confirm raceFlorian Westphal2019-01-091-5/+47
* netfilter: nf_conncount: Fix garbage collection with zonesYi-Hung Wei2019-01-091-4/+9
* netfilter: nf_conncount: expose connection list interfacePablo Neira Ayuso2019-01-091-13/+23
* netfilter: xt_connlimit: don't store address in the conn nodesFlorian Westphal2019-01-091-6/+2
* netfilter: ipset: Fix wraparound in hash:*net* typesJozsef Kadlecsik2018-12-216-63/+63
* netfilter: nf_tables: deactivate expressions in rule replecement routineTaehee Yoo2018-12-171-11/+4
* ipvs: call ip_vs_dst_notifier earlier than ipv6_dev_notfXin Long2018-12-171-0/+3
* netfilter: xt_hashlimit: fix a possible memory leak in htable_create()Taehee Yoo2018-12-171-6/+3
* netfilter: nf_tables: fix use-after-free when deleting compat expressionsFlorian Westphal2018-12-172-3/+5
* netfilter: xt_IDLETIMER: add sysfs filename checking routineTaehee Yoo2018-11-271-0/+20
* netfilter: ipset: actually allow allowable CIDR 0 in hash:net,port,netEric Westbrook2018-11-271-4/+4
* netfilter: ipset: list:set: Decrease refcount synchronously on deletion and r...Stefano Brivio2018-11-272-18/+22
* netfilter: conntrack: fix calculation of next bucket number in early_dropVasily Khoruzhick2018-11-211-5/+8
* netfilter: nf_tables: release chain in flushing setTaehee Yoo2018-10-101-0/+1
* netfilter: xt_cluster: add dependency on conntrack moduleMartin Willi2018-10-101-1/+13
* netfilter: fix memory leaks on netlink_dump_start errorFlorian Westphal2018-09-152-25/+30
* ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()Tan Hu2018-09-151-4/+11
* netfilter: nf_tables: don't allow to rename to already-pending nameFlorian Westphal2018-09-051-13/+29