summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: nf_tables: defer gc run if previous batch is still pendingFlorian Westphal2023-08-232-0/+6
* netfilter: nf_tables: fix out of memory error handlingFlorian Westphal2023-08-231-3/+10
* netfilter: nf_tables: use correct lock to protect gc_listPablo Neira Ayuso2023-08-231-2/+2
* netfilter: nf_tables: GC transaction race with abort pathPablo Neira Ayuso2023-08-231-1/+5
* netfilter: nf_tables: flush pending destroy work before netlink notifierPablo Neira Ayuso2023-08-231-1/+1
* netfilter: nf_tables: validate all pending tablesFlorian Westphal2023-08-231-4/+7
* netfilter: nft_dynset: disallow object mapsPablo Neira Ayuso2023-08-161-0/+3
* netfilter: nf_tables: GC transaction race with netns dismantlePablo Neira Ayuso2023-08-161-1/+6
* netfilter: nf_tables: fix GC transaction races with netns and netlink event e...Pablo Neira Ayuso2023-08-161-4/+32
* ipvs: fix racy memcpy in proc_do_sync_thresholdSishuai Gong2023-08-161-0/+4
* netfilter: set default timeout to 3 secs for sctp shutdown send and recv stateXin Long2023-08-161-3/+3
* netfilter: nf_tables: don't fail inserts if duplicate has expiredFlorian Westphal2023-08-161-19/+4
* netfilter: nf_tables: deactivate catchall elements in next generationFlorian Westphal2023-08-161-0/+1
* netfilter: nf_tables: fix kdoc warnings after gc reworkFlorian Westphal2023-08-161-1/+1
* netfilter: nf_tables: fix false-positive lockdep splatFlorian Westphal2023-08-161-1/+12
* netfilter: nf_tables: remove busy mark and gc batch APIPablo Neira Ayuso2023-08-101-47/+1
* netfilter: nft_set_hash: mark set element as dead when deleting from packet pathPablo Neira Ayuso2023-08-101-2/+4
* netfilter: nf_tables: adapt set backend to use GC transaction APIPablo Neira Ayuso2023-08-104-103/+173
* netfilter: nf_tables: GC transaction API to avoid race with control planePablo Neira Ayuso2023-08-101-11/+237
* netfilter: nf_tables: don't skip expired elements during walkFlorian Westphal2023-08-094-10/+16
* net: annotate data-races around sk->sk_markEric Dumazet2023-07-292-3/+3
* netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHA...Pablo Neira Ayuso2023-07-261-2/+3
* netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERRORPablo Neira Ayuso2023-07-261-9/+18
* netfilter: nft_set_rbtree: fix overlap expiration walkFlorian Westphal2023-07-261-6/+14
* netfilter: nf_tables: skip bound chain on rule flushPablo Neira Ayuso2023-07-201-0/+2
* netfilter: nf_tables: skip bound chain in netns release pathPablo Neira Ayuso2023-07-201-0/+3
* netfilter: nft_set_pipapo: fix improper element removalFlorian Westphal2023-07-201-1/+5
* netfilter: nf_tables: can't schedule in nft_chain_validateFlorian Westphal2023-07-201-2/+2
* netfilter: nf_tables: fix spurious set element insertion failureFlorian Westphal2023-07-201-0/+3
* Merge tag 'nf-23-07-06' of git://git.kernel.org/pub/scm/linux/kernel/git/netf...Paolo Abeni2023-07-068-96/+148
|\
| * netfilter: nf_tables: prevent OOB access in nft_byteorder_evalThadeu Lima de Souza Cascardo2023-07-061-7/+7
| * netfilter: nf_tables: do not ignore genmask when looking up chain by idThadeu Lima de Souza Cascardo2023-07-051-4/+7
| * netfilter: conntrack: don't fold port numbers into addresses before hashingFlorian Westphal2023-07-051-13/+7
| * netfilter: conntrack: Avoid nf_ct_helper_hash uses after freeFlorent Revest2023-07-051-0/+4
| * netfilter: conntrack: gre: don't set assured flag for clash entriesFlorian Westphal2023-07-051-1/+9
| * netfilter: nf_tables: report use refcount overflowPablo Neira Ayuso2023-07-054-71/+114
* | Merge tag 'leds-next-6.5' of git://git.kernel.org/pub/scm/linux/kernel/git/le...Linus Torvalds2023-07-031-2/+1
|\ \ | |/ |/|
| * leds: Change led_trigger_blink[_oneshot]() delay parameters to pass-by-valueHans de Goede2023-05-251-2/+1
* | Merge tag 'net-next-6.5' of git://git.kernel.org/pub/scm/linux/kernel/git/net...Linus Torvalds2023-06-2831-201/+543
|\ \
| * \ Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2023-06-273-5/+55
| |\ \
| | * | netfilter: nf_tables: fix underflow in chain reference counterPablo Neira Ayuso2023-06-261-1/+3
| | * | netfilter: nf_tables: unbind non-anonymous set if rule construction failsPablo Neira Ayuso2023-06-261-0/+2
| | * | netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return va...Ilia.Gavrilov2023-06-261-1/+1
| | * | netfilter: conntrack: dccp: copy entire header to stack buffer, not just basi...Florian Westphal2023-06-261-3/+49
| * | | Merge tag 'nf-next-23-06-26' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski2023-06-2621-70/+194
| |\ \ \
| | * | | netfilter: nf_tables: limit allowed range via nla_policyFlorian Westphal2023-06-2615-21/+21
| | * | | netfilter: nf_tables: Introduce NFT_MSG_GETSETELEM_RESETPhil Sutter2023-06-261-20/+48
| | * | | netfilter: snat: evict closing tcp entries on reply tuple collisionFlorian Westphal2023-06-261-4/+88
| | * | | netfilter: nf_tables: permit update of set sizeFlorian Westphal2023-06-261-0/+4
| | * | | netfilter: ipset: remove rcu_read_lock_bh pair from ip_set_testFlorian Westphal2023-06-261-2/+0