summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* ipvs: fix buffer overflow with sync daemon and serviceJulian Anastasov2018-06-261-6/+15
* netfilter: nf_tables: can't fail after linking rule into active rule listFlorian Westphal2018-05-221-27/+32
* ipvs: fix rtnl_lock lockups caused by start_sync_threadJulian Anastasov2018-05-162-83/+80
* netfilter: conntrack: don't call iter for non-confirmed conntracksFlorian Westphal2018-04-131-10/+29
* netfilter: ctnetlink: fix incorrect nf_ct_put during hash resizeLiping Zhang2018-04-131-1/+6
* netfilter: x_tables: add and use xt_check_proc_nameFlorian Westphal2018-04-083-7/+40
* netfilter: ctnetlink: Make some parameters integer to avoid enum mismatchMatthias Kaehlcke2018-04-081-4/+3
* netfilter: x_tables: unlock on error in xt_find_table_lock()Dan Carpenter2018-03-241-1/+3
* ipvs: explicitly forbid ipv6 service/dest creation if ipv6 mod is disabledPaolo Abeni2018-03-241-5/+17
* netfilter: nft_dynset: continue to next expr if _OP_ADD succeededLiping Zhang2018-03-241-3/+2
* netfilter: nf_ct_helper: permit cthelpers with different names via nfnetlinkLiping Zhang2018-03-241-5/+21
* netfilter: xt_CT: fix refcnt leak on error pathGao Feng2018-03-241-2/+9
* netfilter: x_tables: pack percpu counter allocationsFlorian Westphal2018-03-181-9/+25
* netfilter: x_tables: pass xt_counters struct to counter allocatorFlorian Westphal2018-03-181-0/+30
* netfilter: x_tables: pass xt_counters struct instead of packet counterFlorian Westphal2018-03-181-0/+9
* netfilter: IDLETIMER: be syzkaller friendlyEric Dumazet2018-03-181-3/+6
* netfilter: nat: cope with negative port rangePaolo Abeni2018-03-181-2/+5
* netfilter: x_tables: fix missing timer initialization in xt_LEDPaolo Abeni2018-03-181-6/+6
* netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insertCong Wang2018-02-251-5/+17
* netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1()Cong Wang2018-02-251-0/+1
* netfilter: x_tables: avoid out-of-bounds reads in xt_request_find_{match|target}Eric Dumazet2018-02-251-0/+6
* netfilter: x_tables: fix int overflow in xt_alloc_table_info()Dmitry Vyukov2018-02-251-3/+1
* netfilter: xt_osf: Add missing permission checksKevin Cernekee2018-01-311-0/+7
* netfilter: nfnetlink_cthelper: Add missing permission checksKevin Cernekee2018-01-311-0/+10
* netfilter: nfnetlink_queue: fix secctx memory leakLiping Zhang2017-12-251-2/+7
* netfilter: nfnl_cthelper: fix a race when walk the nf_ct_helper_hash tableLiping Zhang2017-12-251-96/+81
* netfilter: nfnl_cthelper: Fix memory leakJeffy Chen2017-12-251-3/+9
* netfilter: nfnl_cthelper: fix runtime expectation policy updatesPablo Neira Ayuso2017-12-251-2/+84
* netfilter: ipvs: Fix inappropriate output of procfsKUWAZAWA Takuya2017-12-201-0/+4
* Fix handling of verdicts after NF_QUEUEDebabrata Banerjee2017-12-161-0/+5
* netfilter: nf_tables: fix oob accessFlorian Westphal2017-11-301-1/+1
* netfilter: nft_queue: use raw_smp_processor_id()Pablo Neira Ayuso2017-11-301-1/+1
* netfilter: nat: Revert "netfilter: nat: convert nat bysrc hash to rhashtable"Florian Westphal2017-11-181-78/+56
* netfilter: nat: avoid use of nf_conn_nat extensionFlorian Westphal2017-11-182-15/+5
* netfilter: nft_meta: deal with PACKET_LOOPBACK in netdev familyLiping Zhang2017-11-151-1/+27
* netfilter: nf_ct_expect: Change __nf_ct_expect_check() return value.Jarno Rajahalme2017-10-211-2/+2
* netfilter: nfnl_cthelper: fix incorrect helper->expect_class_maxLiping Zhang2017-10-081-9/+11
* netfilter: invoke synchronize_rcu after set the _hook_ to NULLLiping Zhang2017-10-084-1/+6
* net/netfilter/nf_conntrack_core: Fix net_conntrack_lock()Manfred Spraul2017-09-271-23/+29
* netfilter: nat: fix src map lookupFlorian Westphal2017-08-301-8/+9
* netfilter: nf_ct_ext: fix possible panic after nf_ct_extend_unregisterLiping Zhang2017-08-241-3/+10
* ipvs: SNAT packet replies only for NATed connectionsJulian Anastasov2017-07-271-5/+14
* netfilter: synproxy: fix conntrackd interactionEric Leblond2017-07-051-0/+4
* netfilter: xt_TCPMSS: add more sanity tests on tcph->doffEric Dumazet2017-07-051-1/+5
* netfilter: nft_log: restrict the log prefix length to 127Liping Zhang2017-06-172-2/+2
* netfilter: nf_tables: fix set->nelems counting with no NLM_F_EXCLPablo Neira Ayuso2017-06-171-7/+9
* netfilter: nf_conntrack_sip: fix wrong memory initialisationChristophe Leroy2017-06-171-2/+0
* netfilter: nft_set_rbtree: handle element re-addition after deletionPablo Neira Ayuso2017-06-141-11/+11
* netfilter: conntrack: refine gc worker heuristics, reduxFlorian Westphal2017-03-121-19/+20
* netfilter: conntrack: remove GC_MAX_EVICTS breakFlorian Westphal2017-03-121-5/+2