summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHA...Pablo Neira Ayuso2023-07-261-2/+3
* netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERRORPablo Neira Ayuso2023-07-261-9/+18
* netfilter: nft_set_rbtree: fix overlap expiration walkFlorian Westphal2023-07-261-6/+14
* netfilter: nf_tables: skip bound chain on rule flushPablo Neira Ayuso2023-07-201-0/+2
* netfilter: nf_tables: skip bound chain in netns release pathPablo Neira Ayuso2023-07-201-0/+3
* netfilter: nft_set_pipapo: fix improper element removalFlorian Westphal2023-07-201-1/+5
* netfilter: nf_tables: can't schedule in nft_chain_validateFlorian Westphal2023-07-201-2/+2
* netfilter: nf_tables: fix spurious set element insertion failureFlorian Westphal2023-07-201-0/+3
* Merge tag 'nf-23-07-06' of git://git.kernel.org/pub/scm/linux/kernel/git/netf...Paolo Abeni2023-07-068-96/+148
|\
| * netfilter: nf_tables: prevent OOB access in nft_byteorder_evalThadeu Lima de Souza Cascardo2023-07-061-7/+7
| * netfilter: nf_tables: do not ignore genmask when looking up chain by idThadeu Lima de Souza Cascardo2023-07-051-4/+7
| * netfilter: conntrack: don't fold port numbers into addresses before hashingFlorian Westphal2023-07-051-13/+7
| * netfilter: conntrack: Avoid nf_ct_helper_hash uses after freeFlorent Revest2023-07-051-0/+4
| * netfilter: conntrack: gre: don't set assured flag for clash entriesFlorian Westphal2023-07-051-1/+9
| * netfilter: nf_tables: report use refcount overflowPablo Neira Ayuso2023-07-054-71/+114
* | Merge tag 'leds-next-6.5' of git://git.kernel.org/pub/scm/linux/kernel/git/le...Linus Torvalds2023-07-031-2/+1
|\ \ | |/ |/|
| * leds: Change led_trigger_blink[_oneshot]() delay parameters to pass-by-valueHans de Goede2023-05-251-2/+1
* | Merge tag 'net-next-6.5' of git://git.kernel.org/pub/scm/linux/kernel/git/net...Linus Torvalds2023-06-2831-201/+543
|\ \
| * \ Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2023-06-273-5/+55
| |\ \
| | * | netfilter: nf_tables: fix underflow in chain reference counterPablo Neira Ayuso2023-06-261-1/+3
| | * | netfilter: nf_tables: unbind non-anonymous set if rule construction failsPablo Neira Ayuso2023-06-261-0/+2
| | * | netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return va...Ilia.Gavrilov2023-06-261-1/+1
| | * | netfilter: conntrack: dccp: copy entire header to stack buffer, not just basi...Florian Westphal2023-06-261-3/+49
| * | | Merge tag 'nf-next-23-06-26' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski2023-06-2621-70/+194
| |\ \ \
| | * | | netfilter: nf_tables: limit allowed range via nla_policyFlorian Westphal2023-06-2615-21/+21
| | * | | netfilter: nf_tables: Introduce NFT_MSG_GETSETELEM_RESETPhil Sutter2023-06-261-20/+48
| | * | | netfilter: snat: evict closing tcp entries on reply tuple collisionFlorian Westphal2023-06-261-4/+88
| | * | | netfilter: nf_tables: permit update of set sizeFlorian Westphal2023-06-261-0/+4
| | * | | netfilter: ipset: remove rcu_read_lock_bh pair from ip_set_testFlorian Westphal2023-06-261-2/+0
| | * | | netfilter: nft_payload: rebuild vlan header when neededPablo Neira Ayuso2023-06-261-1/+2
| | * | | ipvs: dynamically limit the connection hash tableJulian Anastasov2023-06-011-9/+17
| | * | | ipvs: increase ip_vs_conn_tab_bits range for 64BITAbhijeet Rastogi2023-06-012-15/+16
| * | | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2023-06-229-96/+417
| |\ \ \ \ | | | |/ / | | |/| |
| * | | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2023-06-155-22/+112
| |\ \ \ \
| * | | | | net: move gso declarations and functions to their own filesEric Dumazet2023-06-102-0/+2
| * | | | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2023-06-084-2/+15
| |\ \ \ \ \
| * | | | | | ipv4: Drop tos parameter from flowi4_update_output()Guillaume Nault2023-06-021-2/+2
| | |_|_|/ / | |/| | | |
| * | | | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2023-05-183-10/+18
| |\ \ \ \ \
| * | | | | | netfilter: flowtable: split IPv6 datapath in helper functionsPablo Neira Ayuso2023-05-181-41/+71
| * | | | | | netfilter: flowtable: split IPv4 datapath in helper functionsPablo Neira Ayuso2023-05-181-42/+77
| * | | | | | netfilter: flowtable: simplify route logicPablo Neira Ayuso2023-05-182-25/+11
| * | | | | | netfilter: conntrack: allow insertion clash of gre protocolFaicker Mo2023-05-181-0/+1
| * | | | | | netfilter: nft_set_pipapo: Use struct_size()Christophe JAILLET2023-05-181-4/+2
| * | | | | | netfilter: nft_exthdr: add boolean DCCP option matchingJeremy Sowden2023-05-181-0/+106
| * | | | | | netfilter: nf_tables: always increment set element countFlorian Westphal2023-05-181-4/+7
| * | | | | | netfilter: nf_tables: relax set/map validation checksFlorian Westphal2023-05-181-8/+15
* | | | | | | Merge tag 'hardening-v6.5-rc1' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds2023-06-271-5/+5
|\ \ \ \ \ \ \ | |_|_|_|_|/ / |/| | | | | |
| * | | | | | netfilter: ipset: Replace strlcpy with strscpyAzeem Shaikh2023-06-201-5/+5
| |/ / / / /
* | | | | | netfilter: nf_tables: Fix for deleting base chains with payloadPhil Sutter2023-06-201-7/+9
* | | | | | netfilter: nfnetlink_osf: fix module autoloadPablo Neira Ayuso2023-06-202-1/+1