summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* Merge tag 'net-next-6.5' of git://git.kernel.org/pub/scm/linux/kernel/git/net...Linus Torvalds2023-06-2831-201/+543
|\
| * Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2023-06-273-5/+55
| |\
| | * netfilter: nf_tables: fix underflow in chain reference counterPablo Neira Ayuso2023-06-261-1/+3
| | * netfilter: nf_tables: unbind non-anonymous set if rule construction failsPablo Neira Ayuso2023-06-261-0/+2
| | * netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return va...Ilia.Gavrilov2023-06-261-1/+1
| | * netfilter: conntrack: dccp: copy entire header to stack buffer, not just basi...Florian Westphal2023-06-261-3/+49
| * | Merge tag 'nf-next-23-06-26' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski2023-06-2621-70/+194
| |\ \
| | * | netfilter: nf_tables: limit allowed range via nla_policyFlorian Westphal2023-06-2615-21/+21
| | * | netfilter: nf_tables: Introduce NFT_MSG_GETSETELEM_RESETPhil Sutter2023-06-261-20/+48
| | * | netfilter: snat: evict closing tcp entries on reply tuple collisionFlorian Westphal2023-06-261-4/+88
| | * | netfilter: nf_tables: permit update of set sizeFlorian Westphal2023-06-261-0/+4
| | * | netfilter: ipset: remove rcu_read_lock_bh pair from ip_set_testFlorian Westphal2023-06-261-2/+0
| | * | netfilter: nft_payload: rebuild vlan header when neededPablo Neira Ayuso2023-06-261-1/+2
| | * | ipvs: dynamically limit the connection hash tableJulian Anastasov2023-06-011-9/+17
| | * | ipvs: increase ip_vs_conn_tab_bits range for 64BITAbhijeet Rastogi2023-06-012-15/+16
| * | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2023-06-229-96/+417
| |\ \ \ | | | |/ | | |/|
| * | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2023-06-155-22/+112
| |\ \ \
| * | | | net: move gso declarations and functions to their own filesEric Dumazet2023-06-102-0/+2
| * | | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2023-06-084-2/+15
| |\ \ \ \
| * | | | | ipv4: Drop tos parameter from flowi4_update_output()Guillaume Nault2023-06-021-2/+2
| | |_|_|/ | |/| | |
| * | | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2023-05-183-10/+18
| |\ \ \ \
| * | | | | netfilter: flowtable: split IPv6 datapath in helper functionsPablo Neira Ayuso2023-05-181-41/+71
| * | | | | netfilter: flowtable: split IPv4 datapath in helper functionsPablo Neira Ayuso2023-05-181-42/+77
| * | | | | netfilter: flowtable: simplify route logicPablo Neira Ayuso2023-05-182-25/+11
| * | | | | netfilter: conntrack: allow insertion clash of gre protocolFaicker Mo2023-05-181-0/+1
| * | | | | netfilter: nft_set_pipapo: Use struct_size()Christophe JAILLET2023-05-181-4/+2
| * | | | | netfilter: nft_exthdr: add boolean DCCP option matchingJeremy Sowden2023-05-181-0/+106
| * | | | | netfilter: nf_tables: always increment set element countFlorian Westphal2023-05-181-4/+7
| * | | | | netfilter: nf_tables: relax set/map validation checksFlorian Westphal2023-05-181-8/+15
* | | | | | Merge tag 'hardening-v6.5-rc1' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds2023-06-271-5/+5
|\ \ \ \ \ \ | |_|_|_|_|/ |/| | | | |
| * | | | | netfilter: ipset: Replace strlcpy with strscpyAzeem Shaikh2023-06-201-5/+5
| |/ / / /
* | | | | netfilter: nf_tables: Fix for deleting base chains with payloadPhil Sutter2023-06-201-7/+9
* | | | | netfilter: nfnetlink_osf: fix module autoloadPablo Neira Ayuso2023-06-202-1/+1
* | | | | netfilter: nf_tables: drop module reference after updating chainPablo Neira Ayuso2023-06-201-0/+2
* | | | | netfilter: nf_tables: disallow timeout for anonymous setsPablo Neira Ayuso2023-06-201-0/+7
* | | | | netfilter: nf_tables: disallow updates of anonymous setsPablo Neira Ayuso2023-06-201-0/+3
* | | | | netfilter: nf_tables: reject unbound chain set before commit phasePablo Neira Ayuso2023-06-201-0/+13
* | | | | netfilter: nf_tables: reject unbound anonymous set before commit phasePablo Neira Ayuso2023-06-201-3/+32
* | | | | netfilter: nf_tables: disallow element updates of bound anonymous setsPablo Neira Ayuso2023-06-201-2/+5
* | | | | netfilter: nf_tables: fix underflow in object reference counterPablo Neira Ayuso2023-06-201-8/+5
* | | | | netfilter: nft_set_pipapo: .walk does not deal with generationsPablo Neira Ayuso2023-06-201-1/+5
* | | | | netfilter: nf_tables: drop map element references from preparation phasePablo Neira Ayuso2023-06-205-31/+163
* | | | | netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chainPablo Neira Ayuso2023-06-202-7/+41
* | | | | netfilter: nf_tables: fix chain binding transaction logicPablo Neira Ayuso2023-06-202-40/+133
* | | | | ipvs: align inner_mac_header for encapsulationTerin Stock2023-06-191-0/+2
| |_|_|/ |/| | |
* | | | net/sched: act_ct: Fix promotion of offloaded unreplied tuplePaul Blakey2023-06-142-5/+12
* | | | netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULEPablo Neira Ayuso2023-06-081-1/+2
* | | | netfilter: nfnetlink: skip error delivery on batch in case of ENOMEMPablo Neira Ayuso2023-06-081-1/+2
* | | | netfilter: nf_tables: integrate pipapo into commit protocolPablo Neira Ayuso2023-06-082-15/+96
| |_|/ |/| |
* | | netfilter: nf_tables: out-of-bound check in chain blobPablo Neira Ayuso2023-06-071-1/+1