summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
...
* netfilter: nf_tables: use READ_ONCE and WRITE_ONCE for shared generation id a...Pablo Neira Ayuso2022-08-251-7/+13
* netfilter: nf_tables: fix null deref due to zeroed list headFlorian Westphal2022-08-171-0/+1
* netfilter: nf_tables: do not allow RULE_ID to refer to another chainThadeu Lima de Souza Cascardo2022-08-171-2/+5
* netfilter: nf_tables: do not allow CHAIN_ID to refer to another tableThadeu Lima de Souza Cascardo2022-08-171-2/+4
* netfilter: nf_tables: do not allow SET_ID to refer to another tableThadeu Lima de Souza Cascardo2022-08-171-1/+3
* netfilter: nf_queue: do not allow packet truncation below transport header of...Florian Westphal2022-08-031-1/+6
* net: netfilter: use kfree_drop_reason() for NF_DROPMenglong Dong2022-07-291-1/+2
* ip: Fix data-races around sysctl_ip_default_ttl.Kuniyuki Iwashima2022-07-291-1/+1
* netfilter: nf_tables: replace BUG_ON by element length checkPablo Neira Ayuso2022-07-211-21/+51
* netfilter: nf_log: incorrect offset to network headerPablo Neira Ayuso2022-07-211-4/+4
* netfilter: nft_payload: don't allow th access for fragmentsFlorian Westphal2022-07-122-5/+6
* netfilter: nft_payload: support for inner header matching / manglingPablo Neira Ayuso2022-07-121-2/+54
* netfilter: nf_tables: convert pktinfo->tprot_set to flags fieldPablo Neira Ayuso2022-07-124-6/+6
* netfilter: nf_tables: stricter validation of element dataPablo Neira Ayuso2022-07-121-1/+8
* netfilter: nft_set_pipapo: release elements in clone from abort pathPablo Neira Ayuso2022-07-121-15/+33
* netfilter: nft_dynset: restore set element counter when failing to updatePablo Neira Ayuso2022-07-071-0/+2
* netfilter: use get_random_u32 instead of prandomFlorian Westphal2022-06-292-20/+5
* netfilter: nf_tables: bail out early if hardware offload is not supportedPablo Neira Ayuso2022-06-142-2/+23
* netfilter: nf_tables: memleak flow rule from commit pathPablo Neira Ayuso2022-06-141-0/+6
* netfilter: nf_tables: release new hooks on unsupported flowtable flagsPablo Neira Ayuso2022-06-141-4/+8
* netfilter: nf_tables: always initialize flowtable hook list in transactionPablo Neira Ayuso2022-06-141-0/+1
* netfilter: nf_tables: delete flowtable hooks via transaction listPablo Neira Ayuso2022-06-141-25/+6
* netfilter: nf_tables: use kfree_rcu(ptr, rcu) to release hooks in clean_net pathPablo Neira Ayuso2022-06-141-1/+1
* netfilter: nat: really support inet nat without l3 addressFlorian Westphal2022-06-141-1/+2
* netfilter: nf_tables: double hook unregistration in netns pathPablo Neira Ayuso2022-06-061-13/+41
* netfilter: nf_tables: hold mutex on netns pre_exit pathPablo Neira Ayuso2022-06-061-0/+4
* netfilter: nf_tables: sanitize nft_set_desc_concat_parse()Pablo Neira Ayuso2022-06-061-4/+13
* netfilter: nf_tables: disallow non-stateful expression in sets earlierPablo Neira Ayuso2022-06-061-9/+10
* netfilter: flowtable: move dst_check to packet pathRitaro Takenaka2022-05-252-22/+20
* netfilter: flowtable: pass flowtable to nf_flow_table_iterate()Pablo Neira Ayuso2022-05-251-10/+10
* netfilter: flowtable: fix TCP flow teardownPablo Neira Ayuso2022-05-252-27/+9
* netfilter: nft_flow_offload: fix offload with pppoe + vlanFelix Fietkau2022-05-251-1/+2
* netfilter: nft_flow_offload: skip dst neigh lookup for ppp devicesFelix Fietkau2022-05-251-9/+13
* netfilter: flowtable: fix excessive hw offload attempts after failureFelix Fietkau2022-05-251-1/+3
* netfilter: nft_socket: only do sk lookups when indev is availableFlorian Westphal2022-05-091-14/+38
* netfilter: conntrack: fix udp offload timeout sysctlVolodymyr Mytnyk2022-05-091-1/+1
* netfilter: nft_set_rbtree: overlap detection with element re-addition after d...Pablo Neira Ayuso2022-05-091-1/+5
* ipvs: correctly print the memory size of ip_vs_conn_tabPengcheng Yang2022-05-091-1/+1
* netfilter: nft_ct: fix use after free when attaching zone templateFlorian Westphal2022-04-271-1/+4
* netfilter: conntrack: avoid useless indirection during conntrack destructionFlorian Westphal2022-04-271-6/+6
* netfilter: conntrack: convert to refcount_t apiFlorian Westphal2022-04-278-27/+23
* netfilter: nf_tables: nft_parse_register can return a negative valueAntoine Tenart2022-04-201-1/+1
* netfilter: nft_socket: make cgroup match work in input tooFlorian Westphal2022-04-201-4/+3
* netfilter: conntrack: revisit gc autotuningFlorian Westphal2022-04-131-17/+68
* net: prefer nf_ct_put instead of nf_conntrack_putFlorian Westphal2022-04-081-2/+2
* netfilter: nf_conntrack_tcp: preserve liberal flag in tcp optionsPablo Neira Ayuso2022-04-081-4/+13
* netfilter: conntrack: Add and use nf_ct_set_auto_assign_helper_warned()Phil Sutter2022-04-082-0/+9
* netfilter: flowtable: Fix QinQ and pppoe support for inet tablePablo Neira Ayuso2022-04-082-18/+17
* netfilter: nf_tables: validate registers coming from userspace.Pablo Neira Ayuso2022-03-281-5/+17
* netfilter: nf_tables: initialize registers in nft_do_chain()Pablo Neira Ayuso2022-03-281-1/+1
generated by cgit v1.2.3 (git 2.46.0) at 2025-04-23 12:20:00 +0000