summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: fix regression in looped (broad|multi)cast's MAC handlingIgnacy Gawędzki2021-12-292-2/+4
* netfilter: ipvs: Fix reuse connection if RS weight is 0yangxingwu2021-12-011-4/+4
* netfilter: nfnetlink_queue: fix OOB when mac header was clearedFlorian Westphal2021-11-261-1/+1
* netfilter: Kconfig: use 'default y' instead of 'm' for bool config optionVegard Nossum2021-10-271-1/+1
* netfilter: ipvs: make global sysctl readonly in non-init netnsAntoine Tenart2021-10-271-0/+5
* netfilter: ipset: Fix oversized kvmalloc() callsJozsef Kadlecsik2021-10-061-2/+2
* ipvs: check that ip_vs_conn_tab_bits is between 8 and 20Andrea Claudi2021-10-061-0/+4
* netfilter: conntrack: collect all entries in one cycleFlorian Westphal2021-09-031-49/+22
* netfilter: nft_exthdr: fix endianness of tcp option castSergey Marinkevich2021-08-261-5/+3
* netfilter: nft_nat: allow to specify layer 4 protocol NAT onlyPablo Neira Ayuso2021-08-041-1/+3
* netfilter: conntrack: adjust stop timestamp to real expiry valueFlorian Westphal2021-08-041-1/+6
* netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfoVasily Averin2021-07-281-0/+3
* netfilter: nft_tproxy: restrict support to TCP and UDP transport protocolsPablo Neira Ayuso2021-07-201-1/+8
* netfilter: nft_osf: check for TCP packet before further processingPablo Neira Ayuso2021-07-201-0/+5
* netfilter: nft_exthdr: check for IPv6 packet before further processingPablo Neira Ayuso2021-07-201-0/+3
* netfilter: synproxy: Fix out of bounds when parsing TCP optionsMaxim Mikityanskiy2021-06-301-0/+5
* netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatchesPablo Neira Ayuso2021-06-101-2/+6
* ipvs: ignore IP_VS_SVC_F_HASHED flag when adding serviceJulian Anastasov2021-06-101-1/+1
* netfilter: conntrack: Make global sysctls readonly in non-init netnsJonathon Reinhart2021-05-221-1/+4
* netfilter: nftables: avoid overflows in nft_hash_buckets()Eric Dumazet2021-05-221-1/+9
* netfilter: nfnetlink_osf: Fix a missing skb_header_pointer() NULL checkPablo Neira Ayuso2021-05-221-0/+2
* netfilter: xt_SECMARK: add new revision to fix structure layoutPablo Neira Ayuso2021-05-221-19/+69
* netfilter: nft_limit: avoid possible divide error in nft_limit_initEric Dumazet2021-04-281-2/+2
* netfilter: conntrack: do not print icmpv6 as unknown via /procPablo Neira Ayuso2021-04-281-0/+1
* netfilter: x_tables: fix compat match/target pad out-of-bound writeFlorian Westphal2021-04-161-8/+2
* netfilter: x_tables: Use correct memory barriers.Mark Tomlinson2021-03-301-1/+1
* Revert "netfilter: x_tables: Switch synchronization to RCU"Mark Tomlinson2021-03-301-15/+34
* netfilter: ctnetlink: fix dump of the expect mask attributeFlorian Westphal2021-03-301-0/+1
* netfilter: x_tables: gpf inside xt_find_revision()Vasily Averin2021-03-171-2/+4
* netfilter: conntrack: skip identical origin tuple in same zone onlyFlorian Westphal2021-02-231-1/+2
* netfilter: flowtable: fix tcp and udp header checksum updateSven Auhagen2021-02-231-2/+2
* netfilter: xt_recent: Fix attempt to update deleted entryJozsef Kadlecsik2021-02-231-2/+10
* netfilter: nft_dynset: add timeout extension to templatePablo Neira Ayuso2021-02-031-1/+3
* netfilter: nf_nat: Fix memleak in nf_nat_initDinghao Liu2021-01-191-0/+1
* netfilter: conntrack: fix reading nf_conntrack_bucketsJesper Dangaard Brouer2021-01-191-0/+3
* netfilter: xt_RATEEST: reject non-null terminated string from userspaceFlorian Westphal2021-01-121-0/+3
* netfilter: ipset: fix shift-out-of-bounds in htable_bits()Vasily Averin2021-01-121-15/+5
* netfilter: x_tables: Switch synchronization to RCUSubash Abhinov Kasiviswanathan2020-12-301-34/+15
* netfilter: nf_tables: avoid false-postive lockdep splatFlorian Westphal2020-12-111-1/+2
* netfilter: use actual socket sk rather than skb sk when routing harderJason A. Donenfeld2020-11-181-2/+2
* netfilter: ipset: Update byte and packet counters regardless of whether they ...Stefano Brivio2020-11-181-1/+2
* ipvs: Fix uninit-value in do_ip_vs_set_ctl()Peilin Ye2020-10-301-3/+4
* netfilter: nf_fwd_netdev: clear timestamp in forwarding pathPablo Neira Ayuso2020-10-302-0/+2
* netfilter: conntrack: connection timeout after re-registerFrancesco Ruggeri2020-10-301-6/+13
* netfilter: nf_log: missing vlan offload tag and protoPablo Neira Ayuso2020-10-291-0/+12
* ipvs: clear skb->tstamp in forwarding pathJulian Anastasov2020-10-291-0/+6
* netfilter: ctnetlink: add a range check for l3/l4 protonumWill McVicker2020-10-071-0/+2
* netfilter: conntrack: allow sctp hearbeat after connection re-useFlorian Westphal2020-09-171-4/+35
* netfilter: nfnetlink: nfnetlink_unicast() reports EAGAIN instead of ENOBUFSPablo Neira Ayuso2020-09-094-38/+39
* netfilter: nf_tables: fix destination register zeroingFlorian Westphal2020-09-091-1/+3
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-23 19:48:55 +0000