summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* treewide: use get_random_u32() when possibleJason A. Donenfeld2022-10-112-2/+2
* treewide: use get_random_{u8,u16}() when possible, part 1Jason A. Donenfeld2022-10-111-2/+2
* treewide: use prandom_u32_max() when possible, part 1Jason A. Donenfeld2022-10-111-2/+2
* Merge tag 'cgroup-for-6.1' of git://git.kernel.org/pub/scm/linux/kernel/git/t...Linus Torvalds2022-10-101-4/+5
|\
| * Merge branch 'for-6.0-fixes' into for-6.1Tejun Heo2022-09-2315-112/+288
| |\
| * | cgroup: Replace cgroup->ancestor_ids[] with ->ancestors[]Tejun Heo2022-08-151-4/+5
* | | Merge https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-nextJakub Kicinski2022-10-035-9/+155
|\ \ \
| * | | net: netfilter: move bpf_ct_set_nat_info kfunc in nf_nat_bpf.cLorenzo Bianconi2022-10-034-52/+87
| * | | net: netfilter: add bpf_ct_set_nat_info kfunc helperLorenzo Bianconi2022-09-211-1/+46
| * | | bpf: Move nf_conn extern declarations to filter.hDaniel Xu2022-09-201-0/+1
| * | | bpf: Rename nfct_bsa to nfct_btf_struct_accessDaniel Xu2022-09-201-2/+2
| * | | bpf: Add support for writing to nf_conn:markDaniel Xu2022-09-102-1/+66
* | | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2022-09-225-15/+41
|\ \ \ \
| * | | | netfilter: nf_ct_ftp: fix deadlock when nat rewrite is neededFlorian Westphal2022-09-201-2/+4
| * | | | netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()Tetsuo Handa2022-09-201-0/+1
| * | | | netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()Tetsuo Handa2022-09-201-4/+3
| * | | | netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()Pablo Neira Ayuso2022-09-071-1/+3
| * | | | netfilter: nf_conntrack_irc: Tighten matching on DCC messageDavid Leadbeater2022-09-071-6/+28
| * | | | netfilter: nf_conntrack_sip: fix ct_sip_walk_headersIgor Ryzhov2022-09-071-2/+2
* | | | | netfilter: conntrack: revisit the gc initial rescheduling biasAntoine Tenart2022-09-211-4/+6
* | | | | netfilter: conntrack: fix the gc rescheduling delayAntoine Tenart2022-09-211-2/+8
* | | | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-nextDavid S. Miller2022-09-0913-196/+259
|\ \ \ \ \
| * | | | | netfilter: nat: avoid long-running port range loopFlorian Westphal2022-09-071-2/+14
| * | | | | netfilter: nat: move repetitive nat port reserve loop to a helperFlorian Westphal2022-09-075-55/+25
| * | | | | netfilter: move from strlcpy with unused retval to strscpyWolfram Sang2022-09-077-21/+21
| * | | | | netfilter: conntrack: reduce timeout when receiving out-of-window fin or rstFlorian Westphal2022-09-071-0/+58
| * | | | | netfilter: conntrack: remove unneeded indent levelFlorian Westphal2022-09-071-53/+45
| * | | | | netfilter: conntrack: ignore overly delayed tcp packetsFlorian Westphal2022-09-071-28/+21
| * | | | | netfilter: conntrack: prepare tcp_in_window for ternary return valueFlorian Westphal2022-09-071-49/+87
* | | | | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netPaolo Abeni2022-09-087-97/+17
|\ \ \ \ \ \ | |/ / / / / |/| / / / / | |/ / / /
| * | | | netfilter: nf_conntrack_irc: Fix forged IP logicDavid Leadbeater2022-09-011-2/+3
| * | | | netfilter: nf_tables: clean up hook list when offload flags check failsPablo Neira Ayuso2022-08-311-1/+3
| * | | | netfilter: remove nf_conntrack_helper sysctl and modparam togglesPablo Neira Ayuso2022-08-315-94/+11
| | |_|/ | |/| |
* | | | netfilter: nft_payload: reject out-of-range attributes via policyFlorian Westphal2022-09-071-3/+3
| |/ / |/| |
* | | netlink: Bounds-check struct nlmsgerr creationKees Cook2022-09-051-3/+5
* | | genetlink: start to validate reserved header bytesJakub Kicinski2022-08-291-0/+1
* | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2022-08-259-22/+106
|\| |
| * | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nfJakub Kicinski2022-08-248-20/+104
| |\ \
| | * | netfilter: flowtable: fix stuck flows on cleanup due to pending workPablo Neira Ayuso2022-08-242-4/+11
| | * | netfilter: flowtable: add function to invoke garbage collection immediatelyPablo Neira Ayuso2022-08-241-3/+9
| | * | netfilter: nf_tables: disallow binding to already bound chainPablo Neira Ayuso2022-08-241-0/+2
| | * | netfilter: nft_tunnel: restrict it to netdev familyPablo Neira Ayuso2022-08-241-0/+1
| | * | netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet familiesPablo Neira Ayuso2022-08-241-3/+15
| | * | netfilter: nf_tables: do not leave chain stats enabled on errorPablo Neira Ayuso2022-08-241-2/+4
| | * | netfilter: nft_payload: do not truncate csum_offset and csum_typePablo Neira Ayuso2022-08-241-6/+13
| | * | netfilter: nft_payload: report ERANGE for too long offset and lengthPablo Neira Ayuso2022-08-241-2/+8
| | * | netfilter: nf_tables: make table handle allocation per-netns friendlyPablo Neira Ayuso2022-08-241-2/+1
| | * | netfilter: nf_tables: disallow updates of implicit chainPablo Neira Ayuso2022-08-241-0/+3
| | * | netfilter: nft_tproxy: restrict to prerouting hookFlorian Westphal2022-08-231-0/+8
| | * | netfilter: conntrack: work around exceeded receive windowFlorian Westphal2022-08-231-0/+31