summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: nf_tables: move dumper state allocation into ->startFlorian Westphal2018-07-241-104/+115
* netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior stateFlorian Westphal2018-07-201-4/+4
* netfilter: nf_tables: don't allow to rename to already-pending nameFlorian Westphal2018-07-201-13/+29
* netfilter: nf_tables: fix memory leaks on chain renameFlorian Westphal2018-07-201-6/+11
* netfilter: nf_tables: free flow table struct tooFlorian Westphal2018-07-201-0/+1
* netfilter: nf_tables: use dev->name directlyFlorian Westphal2018-07-201-9/+5
* netfilter: nft_set_rbtree: fix panic when destroying set by GCTaehee Yoo2018-07-181-2/+5
* netfilter: nft_set_hash: add rcu_barrier() in the nft_rhash_destroy()Taehee Yoo2018-07-181-0/+1
* netfilter: nf_tables: fix jumpstack depth validationTaehee Yoo2018-07-173-9/+18
* netfilter: nf_conntrack: Fix possible possible crash on module loading.Andrey Ryabinin2018-07-091-1/+1
* netfilter: nft_compat: explicitly reject ERROR and standard targetFlorian Westphal2018-07-091-0/+13
* netfilter: nf_tables: place all set backends in one single modulePablo Neira Ayuso2018-07-066-83/+44
* netfilter: nf_tproxy: fix possible non-linear access to transport headerMáté Eckl2018-07-061-4/+4
* netfilter: nf_conncount: fix garbage collection confirm raceFlorian Westphal2018-06-261-5/+47
* netfilter: nf_log: don't hold nf_log_mutex during user accessJann Horn2018-06-261-3/+6
* netfilter: nf_log: fix uninit read in nf_log_proc_dostringJann Horn2018-06-261-0/+4
* netfilter: nf_ct_helper: Fix possible panic after nf_conntrack_helper_unregisterGao Feng2018-06-181-0/+5
* netfilter: nf_queue: augment nfqa_cfg_policyEric Dumazet2018-06-181-0/+3
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netLinus Torvalds2018-06-1616-33/+79
|\
| * netfilter: nf_conncount: Fix garbage collection with zonesYi-Hung Wei2018-06-122-5/+10
| * netfilter: xt_connmark: fix list corruption on rmmodFlorian Westphal2018-06-121-1/+1
| * netfilter: ctnetlink: avoid null pointer dereferenceFlorian Westphal2018-06-121-1/+2
| * netfilter: nf_tables: use WARN_ON_ONCE instead of BUG_ON in nft_do_chain()Taehee Yoo2018-06-121-1/+2
| * netfilter: nf_tables: close race between netns exit and rmmodFlorian Westphal2018-06-122-3/+15
| * netfilter: nf_tables: fix module unload raceFlorian Westphal2018-06-122-6/+16
| * netfilter: nft_dynset: do not reject set updates with NFT_SET_EVALPablo Neira Ayuso2018-06-121-3/+1
| * netfilter: nft_socket: fix module autoloadPablo Neira Ayuso2018-06-121-0/+1
| * Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller2018-06-117-13/+31
| |\
| | * netfilter: nft_set_rbtree: fix parameter of __nft_rbtree_lookup()Taehee Yoo2018-06-061-1/+1
| | * netfilter: ipset: forbid family for hash:mac setsFlorent Fourcot2018-06-061-1/+4
| | * netfilter: ipset: Limit max timeout valueJozsef Kadlecsik2018-06-061-4/+4
| | * netfilter: xt_set: Check hook mask correctlySerhey Popovych2018-06-061-1/+1
| | * ipvs: fix check on xmit to non-local addressesJulian Anastasov2018-06-041-1/+1
| | * ipvs: register conntrack hooks for ftpJulian Anastasov2018-06-021-0/+4
| | * netfilter: nf_tables: check msg_type before nft_trans_set(trans)Alexey Kodanev2018-06-011-5/+6
| | * netfilter: xt_CT: Reject the non-null terminated string from user spaceGao Feng2018-06-011-0/+10
* | | treewide: Use array_size() in vmalloc()Kees Cook2018-06-121-1/+2
* | | treewide: kzalloc() -> kcalloc()Kees Cook2018-06-122-3/+4
* | | treewide: kmalloc() -> kmalloc_array()Kees Cook2018-06-124-6/+8
|/ /
* | netfilter: nf_tables: add NFT_LOGLEVEL_* enumeration and use itPablo Neira Ayuso2018-06-071-5/+5
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds2018-06-0674-1840/+4792
|\ \
| * | Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2018-06-038-42/+69
| |\|
| * | netfilter: nf_tables: handle chain name lookups via rhltableFlorian Westphal2018-06-031-15/+98
| * | netfilter: nf_tables: add connlimit supportPablo Neira Ayuso2018-06-033-0/+307
| * | netfilter: nf_tables: add destroy_clone expressionPablo Neira Ayuso2018-06-032-2/+11
| * | netfilter: nf_tables: garbage collection for stateful expressionsPablo Neira Ayuso2018-06-032-2/+28
| * | netfilter: nf_tables: pass ctx to nf_tables_expr_destroy()Pablo Neira Ayuso2018-06-031-4/+12
| * | netfilter: nf_conncount: expose connection list interfacePablo Neira Ayuso2018-06-031-13/+23
| * | netfilter: nf_tables: pass context to object destroy indirectionPablo Neira Ayuso2018-06-033-8/+10
| * | netfilter: Libify xt_TPROXYMáté Eckl2018-06-032-337/+20