summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: nft_socket: fix erroneous socket assignmentFernando Fernandez Mancera2019-10-011-3/+3
* netfilter: nf_conntrack_ftp: Fix debug outputThomas Jarosch2019-09-211-1/+1
* netfilter: xt_physdev: Fix spurious error message in physdev_mt_checkTodd Seidelmann2019-09-211-4/+2
* netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_infoJuliana Rodrigueiro2019-09-211-11/+25
* netfilter: nft_flow_offload: missing netlink attribute policyPablo Neira Ayuso2019-09-211-0/+6
* netfilter: nf_flow_table: set default timeout after successful insertionPablo Neira Ayuso2019-09-211-1/+1
* netfilter: nft_flow_offload: skip tcp rst and fin packetsPablo Neira Ayuso2019-09-101-3/+6
* netfilter: nf_tables: use-after-free in failing rule with bound setPablo Neira Ayuso2019-09-101-5/+10
* netfilter: ipset: Fix rename concurrency with listingJozsef Kadlecsik2019-08-291-1/+1
* netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and hash:ip,mac...Stefano Brivio2019-08-292-2/+2
* netfilter: ipset: Actually allow destination MAC address for hash:ip,mac sets...Stefano Brivio2019-08-291-4/+0
* netfilter: conntrack: Use consistent ct id hash calculationDirk Morris2019-08-251-8/+8
* netfilter: nft_hash: fix symhash with modulus oneLaura Garcia Liebana2019-08-161-1/+1
* netfilter: conntrack: always store window size un-scaledFlorian Westphal2019-08-161-3/+5
* netfilter: nfnetlink: avoid deadlock due to synchronous request_moduleFlorian Westphal2019-08-161-1/+1
* net: make skb_dst_force return true when dst is refcountedFlorian Westphal2019-07-281-1/+5
* ipvs: fix tinfo memory leak in start_sync_threadJulian Anastasov2019-07-262-66/+72
* ipvs: defer hook registration to avoid leaksJulian Anastasov2019-07-261-7/+14
* ipset: Fix memory accounting for hash types on resizeStefano Brivio2019-07-261-1/+1
* netfilter: nft_flow_offload: IPCB is only valid for ipv4 familyFlorian Westphal2019-07-101-6/+11
* netfilter: nft_flow_offload: don't offload when sequence numbers need adjustmentFlorian Westphal2019-07-101-4/+2
* netfilter: nft_flow_offload: set liberal tracking mode for tcpFlorian Westphal2019-07-101-0/+8
* netfilter: nf_flow_table: ignore DF bit settingFlorian Westphal2019-07-101-2/+1
* ipvs: Fix use-after-free in ip_vs_inYueHaibing2019-06-221-1/+1
* netfilter: nf_queue: fix reinject verdict handlingJagdish Motwani2019-06-221-0/+1
* netfilter: nf_flow_table: fix netdev refcnt leakTaehee Yoo2019-06-151-0/+1
* netfilter: nf_flow_table: check ttl value in flow offload data pathTaehee Yoo2019-06-151-0/+6
* netfilter: nf_tables: fix base chain stat rcu_dereference usageFlorian Westphal2019-06-151-2/+7
* netfilter: nf_conntrack_h323: restore boundary check correctnessJakub Jankowski2019-06-151-1/+1
* netfilter: nf_flow_table: fix missing error check for rhashtable_insert_fastTaehee Yoo2019-06-151-7/+18
* jump_label: move 'asm goto' support test to KconfigMasahiro Yamada2019-06-041-3/+3
* netfilter: nf_tables: add missing ->release_ops() in error path of newrule()Taehee Yoo2019-05-161-1/+4
* netfilter: nf_tables: use-after-free in dynamic operationsPablo Neira Ayuso2019-05-161-1/+3
* netfilter: fix nf_l4proto_log_invalid to log invalid packetsAndrei Vagin2019-05-161-1/+1
* netfilter: nf_tables: prevent shift wrap in nft_chain_parse_hook()Dan Carpenter2019-05-161-1/+1
* netfilter: ctnetlink: don't use conntrack/expect object addresses as idFlorian Westphal2019-05-162-5/+64
* ipvs: do not schedule icmp errors from tunnelsJulian Anastasov2019-05-161-1/+1
* netfilter: fix NETFILTER_XT_TARGET_TEE dependenciesArnd Bergmann2019-05-041-0/+1
* netfilter: nft_set_rbtree: check for inactive element after flag mismatchPablo Neira Ayuso2019-05-041-4/+3
* ipvs: fix warning on unused variableAndrea Claudi2019-05-021-1/+2
* netfilter: nf_tables: bogus EBUSY in helper removal from transactionPablo Neira Ayuso2019-05-021-3/+16
* netfilter: nf_tables: bogus EBUSY when deleting set after flushPablo Neira Ayuso2019-05-024-13/+54
* netfilter: nf_tables: fix set double-free in abort pathPablo Neira Ayuso2019-05-021-6/+11
* netfilter: nft_compat: use .release_ops and remove list of extensionPablo Neira Ayuso2019-05-022-227/+61
* netfilter: nft_compat: don't use refcount_inc on newly allocated entryFlorian Westphal2019-05-021-39/+23
* netfilter: nf_tables: unbind set in rule from commit pathPablo Neira Ayuso2019-05-026-79/+72
* netfilter: nf_tables: warn when expr implements only one of activate/deactivateFlorian Westphal2019-05-021-0/+19
* netfilter: nft_compat: destroy function must not have side effectsFlorian Westphal2019-05-021-1/+47
* netfilter: nf_tables: split set destruction in deactivate and destroy phaseFlorian Westphal2019-05-024-14/+83
* netfilter: nft_compat: make lists per netnsFlorian Westphal2019-05-021-40/+89