summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: physdev: relax br_netfilter dependencyFlorian Westphal2019-04-271-2/+7
* netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP optionsJozsef Kadlecsik2019-03-231-0/+4
* netfilter: nfnetlink_acct: validate NFACCT_FILTER parametersPhil Turnbull2019-03-231-0/+3
* netfilter: nfnetlink_log: just returns error for unknown commandKen-ichirou MATSUZAWA2019-03-231-1/+1
* ipvs: Fix signed integer overflow when setsockopt timeoutZhangXiaoxu2019-03-231-0/+12
* netfilter: nf_tables: fix oops when inserting an element into a verdict mapLiping Zhang2018-12-011-0/+1
* netfilter: xt_IDLETIMER: add sysfs filename checking routineTaehee Yoo2018-11-271-0/+20
* netfilter: ipset: actually allow allowable CIDR 0 in hash:net,port,netEric Westbrook2018-11-271-4/+4
* netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_...Eric Dumazet2018-09-191-2/+2
* ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()Tan Hu2018-09-151-4/+11
* netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior stateFlorian Westphal2018-08-241-4/+4
* netfilter: nf_queue: augment nfqa_cfg_policyEric Dumazet2018-07-171-0/+3
* netfilter: nf_log: don't hold nf_log_mutex during user accessJann Horn2018-07-111-3/+6
* netfilter: nf_tables: use WARN_ON_ONCE instead of BUG_ON in nft_do_chain()Taehee Yoo2018-07-111-1/+2
* ipvs: fix buffer overflow with sync daemon and serviceJulian Anastasov2018-07-031-6/+15
* ipvs: fix rtnl_lock lockups caused by start_sync_threadJulian Anastasov2018-05-162-83/+80
* netfilter: ctnetlink: fix incorrect nf_ct_put during hash resizeLiping Zhang2018-04-131-1/+6
* netfilter: x_tables: add and use xt_check_proc_nameFlorian Westphal2018-04-083-5/+36
* netfilter: ctnetlink: Make some parameters integer to avoid enum mismatchMatthias Kaehlcke2018-04-081-4/+3
* netfilter: xt_CT: fix refcnt leak on error pathGao Feng2018-03-241-2/+9
* netfilter: x_tables: pack percpu counter allocationsFlorian Westphal2018-03-181-9/+25
* netfilter: x_tables: pass xt_counters struct to counter allocatorFlorian Westphal2018-03-181-0/+30
* netfilter: x_tables: pass xt_counters struct instead of packet counterFlorian Westphal2018-03-181-0/+9
* netfilter: IDLETIMER: be syzkaller friendlyEric Dumazet2018-03-181-3/+6
* netfilter: nat: cope with negative port rangePaolo Abeni2018-03-181-2/+5
* netfilter: x_tables: fix missing timer initialization in xt_LEDPaolo Abeni2018-03-181-6/+6
* netfilter: nfnetlink_queue: fix timestamp attributeFlorian Westphal2018-03-181-1/+1
* netfilter: ipvs: avoid unused variable warningsArnd Bergmann2018-02-252-15/+8
* netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insertCong Wang2018-02-251-5/+17
* netfilter: x_tables: avoid out-of-bounds reads in xt_request_find_{match|target}Eric Dumazet2018-02-251-0/+6
* netfilter: x_tables: fix int overflow in xt_alloc_table_info()Dmitry Vyukov2018-02-251-3/+1
* netfilter: nf_queue: Make the queue_handler pernetEric W. Biederman2018-02-162-15/+20
* netfilter: xt_osf: Add missing permission checksKevin Cernekee2018-01-311-0/+7
* netfilter: nfnetlink_cthelper: Add missing permission checksKevin Cernekee2018-01-311-0/+10
* netfilter: nf_conntrack_sip: extend request line validationUlrich Weber2018-01-311-1/+4
* netfilter: restart search if moved to other chainFlorian Westphal2018-01-311-0/+7
* netfilter: nfnetlink_queue: reject verdict request from different portidLiping Zhang2018-01-311-4/+2
* netfilter: nf_ct_expect: remove the redundant slash when policy name is emptyLiping Zhang2018-01-311-1/+1
* netfilter: x_tables: speed up jump target validationFlorian Westphal2018-01-311-0/+50
* netfilter: nfnetlink_queue: fix secctx memory leakLiping Zhang2017-12-251-2/+7
* netfilter: nfnl_cthelper: fix a race when walk the nf_ct_helper_hash tableLiping Zhang2017-12-251-96/+81
* netfilter: nfnl_cthelper: Fix memory leakJeffy Chen2017-12-251-3/+9
* netfilter: nfnl_cthelper: fix runtime expectation policy updatesPablo Neira Ayuso2017-12-251-2/+84
* netfilter: ipvs: Fix inappropriate output of procfsKUWAZAWA Takuya2017-12-201-0/+4
* netfilter: nf_tables: fix oob accessFlorian Westphal2017-11-301-1/+1
* netfilter: nft_queue: use raw_smp_processor_id()Pablo Neira Ayuso2017-11-301-1/+1
* netfilter: nft_meta: deal with PACKET_LOOPBACK in netdev familyLiping Zhang2017-11-151-1/+27
* netfilter: nf_ct_expect: Change __nf_ct_expect_check() return value.Jarno Rajahalme2017-10-211-2/+2
* netfilter: nfnl_cthelper: fix incorrect helper->expect_class_maxLiping Zhang2017-10-081-9/+11
* netfilter: invoke synchronize_rcu after set the _hook_ to NULLLiping Zhang2017-10-084-1/+6