summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: nf_tables: fix oob accessFlorian Westphal2017-11-301-1/+1
* netfilter: nft_queue: use raw_smp_processor_id()Pablo Neira Ayuso2017-11-301-1/+1
* netfilter: nft_meta: deal with PACKET_LOOPBACK in netdev familyLiping Zhang2017-11-151-1/+27
* netfilter: nf_ct_expect: Change __nf_ct_expect_check() return value.Jarno Rajahalme2017-10-211-2/+2
* netfilter: nfnl_cthelper: fix incorrect helper->expect_class_maxLiping Zhang2017-10-081-9/+11
* netfilter: invoke synchronize_rcu after set the _hook_ to NULLLiping Zhang2017-10-084-1/+6
* netfilter: nf_ct_ext: fix possible panic after nf_ct_extend_unregisterLiping Zhang2017-08-241-3/+10
* ipvs: SNAT packet replies only for NATed connectionsJulian Anastasov2017-07-271-5/+14
* netfilter: synproxy: fix conntrackd interactionEric Leblond2017-07-051-0/+4
* netfilter: xt_TCPMSS: add more sanity tests on tcph->doffEric Dumazet2017-07-051-1/+5
* netfilter: nfnetlink: correctly validate length of batch messagesPhil Turnbull2017-04-301-4/+6
* netfilter: nft_dynset: fix element timeout for HZ != 1000Anders K. Pedersen2016-11-261-2/+4
* netfilter: fix namespace handling in nf_log_proc_dostringJann Horn2016-11-181-2/+4
* ipvs: fix bind to link-local mcast IPv6 address in backupQuentin Armitage2016-10-071-2/+4
* netfilter: x_tables: check for size overflowFlorian Westphal2016-09-151-0/+3
* netfilter: x_tables: check for size overflowFlorian Westphal2016-09-151-0/+3
* netfilter: x_tables: introduce and use xt_copy_counters_from_userFlorian Westphal2016-06-241-0/+74
* netfilter: x_tables: do compat validation via translate_tableFlorian Westphal2016-06-241-0/+8
* netfilter: x_tables: xt_compat_match_from_user doesn't need a retvalFlorian Westphal2016-06-241-3/+2
* netfilter: x_tables: don't reject valid target size on some architecturesFlorian Westphal2016-06-241-2/+2
* netfilter: x_tables: validate all offsets and sizes in a ruleFlorian Westphal2016-06-241-5/+76
* netfilter: x_tables: check for bogus target offsetFlorian Westphal2016-06-241-2/+15
* netfilter: x_tables: check standard target size tooFlorian Westphal2016-06-241-0/+15
* netfilter: x_tables: add compat version of xt_check_entry_offsetsFlorian Westphal2016-06-241-0/+22
* netfilter: x_tables: assert minimum target sizeFlorian Westphal2016-06-241-0/+3
* netfilter: x_tables: add and use xt_check_entry_offsetsFlorian Westphal2016-06-241-0/+34
* nf_conntrack: avoid kernel pointer value leak in slab nameLinus Torvalds2016-05-181-1/+3
* ipvs: drop first packet to redirect conntrackJulian Anastasov2016-05-111-9/+28
* ipvs: correct initial offset of Call-ID header search in SIP persistence engineMarco Angaroni2016-05-111-1/+1
* ipvs: handle ip_vs_fill_iph_skb_off failureArnd Bergmann2016-05-111-2/+2
* netfilter: nft_ct: include direction when dumping NFT_CT_L3PROTOCOL keyFlorian Westphal2015-12-181-0/+1
* netfilter: nf_tables: use skb->protocol instead of assuming ethernet headerPablo Neira Ayuso2015-12-181-1/+1
* netfilter: nf_tables: use reverse traversal commit_list in nf_tables_abortXin Long2015-12-131-1/+2
* netfilter: nfnetlink: fix splat due to incorrect socket memory accounting in ...Pablo Neira Ayuso2015-12-101-2/+0
* netfilter: nfnetlink: avoid recurrent netns lookups in call_batchPablo Neira Ayuso2015-12-102-52/+46
* netfilter: nfnetlink_queue: Unregister pernet subsys in case of init failureNikolay Borisov2015-12-091-0/+1
* netfilter: nfnetlink_queue: avoid harmless unnitialized variable warningsArnd Bergmann2015-11-231-3/+5
* ipvs: use skb_to_full_sk() helperEric Dumazet2015-11-151-8/+8
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller2015-11-1211-98/+122
|\
| * netfilter: nf_tables: add clone interface to expression operationsPablo Neira Ayuso2015-11-102-10/+44
| * netfilter: fix xt_TEE and xt_TPROXY dependenciesArnd Bergmann2015-11-101-3/+3
| * netfilter: nfnetlink_log: work around uninitialized variable warningArnd Bergmann2015-11-101-1/+1
| * netfilter: ipset: Fix hash type expire: release empty hash bucket blockJozsef Kadlecsik2015-11-071-4/+9
| * netfilter: ipset: Fix hash:* type expirationJozsef Kadlecsik2015-11-071-1/+1
| * netfilter: ipset: Fix extension alignmentJozsef Kadlecsik2015-11-077-79/+64
* | netfilter: nft_meta: use skb_to_full_sk() helperEric Dumazet2015-11-081-16/+20
* | netfilter: xt_owner: use skb_to_full_sk() helperEric Dumazet2015-11-081-2/+4
|/
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller2015-11-043-4/+6
|\
| * netfilter: nfnetlink: don't probe module if it existsFlorian Westphal2015-10-281-1/+1
| * netfilter: nf_nat_redirect: add missing NULL pointer checkMunehisa Kamata2015-10-271-1/+1
generated by cgit v1.2.3 (git 2.25.1) at 2024-07-19 21:30:12 +0000