summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: xt_owner: Fix for unsafe access of sk->sk_socketPhil Sutter2023-12-061-4/+12
* netfilter: nf_tables: validate family when identifying table via handlePablo Neira Ayuso2023-12-061-2/+3
* netfilter: nf_tables: bail out on mismatching dynset and set expressionsPablo Neira Ayuso2023-12-061-4/+9
* netfilter: nf_tables: fix 'exist' matching on bigendian archesFlorian Westphal2023-12-062-4/+8
* netfilter: nft_set_pipapo: skip inactive elements during set walkFlorian Westphal2023-12-061-0/+3
* netfilter: bpf: fix bad registration on nf_defragD. Wythe2023-12-061-5/+5
* netfilter: nf_tables: split async and sync catchall in two functionsPablo Neira Ayuso2023-11-141-25/+30
* netfilter: ipset: fix race condition between swap/destroy and kernel side add...Jozsef Kadlecsik2023-11-141-7/+7
* netfilter: nf_tables: bogus ENOENT when destroying element which does not existPablo Neira Ayuso2023-11-141-2/+3
* netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()Dan Carpenter2023-11-142-3/+4
* netfilter: nft_set_rbtree: Remove unused variable nft_netYang Li2023-11-141-2/+0
* Merge tag 'nf-23-11-08' of git://git.kernel.org/pub/scm/linux/kernel/git/netf...Jakub Kicinski2023-11-0827-7/+69
|\
| * netfilter: nat: fix ipv6 nat redirect with mapped and scoped addressesFlorian Westphal2023-11-081-1/+26
| * netfilter: xt_recent: fix (increase) ipv6 literal buffer lengthMaciej Żenczykowski2023-11-081-1/+1
| * ipvs: add missing module descriptionsFlorian Westphal2023-11-0816-0/+16
| * netfilter: nf_tables: remove catchall element in GC sync pathPablo Neira Ayuso2023-11-081-5/+17
| * netfilter: add missing module descriptionsFlorian Westphal2023-11-089-0/+9
* | bpf: Add __bpf_kfunc_{start,end}_defs macrosDave Marchevsky2023-11-012-8/+4
|/
* Merge tag 'ipsec-next-2023-10-28' of git://git.kernel.org/pub/scm/linux/kerne...Jakub Kicinski2023-10-301-1/+1
|\
| * xfrm: pass struct net to xfrm_decode_session wrappersFlorian Westphal2023-10-061-1/+1
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2023-10-261-7/+7
|\ \
| * | netfilter: flowtable: GC pushes back packets to classic pathPablo Neira Ayuso2023-10-251-7/+7
* | | Merge tag 'nf-next-23-10-25' of git://git.kernel.org/pub/scm/linux/kernel/git...Paolo Abeni2023-10-268-438/+486
|\ \ \
| * | | netfilter: nf_tables: Carry reset boolean in nft_set_dump_ctxPhil Sutter2023-10-241-10/+8
| * | | netfilter: nf_tables: set->ops->insert returns opaque set element in case of ...Pablo Neira Ayuso2023-10-245-23/+26
| * | | netfilter: nf_tables: shrink memory consumption of set elementsPablo Neira Ayuso2023-10-245-151/+107
| * | | netfilter: nf_tables: expose opaque set element as struct nft_elem_privPablo Neira Ayuso2023-10-247-108/+148
| * | | netfilter: nf_tables: set backend .flush always succeedsPablo Neira Ayuso2023-10-245-22/+6
| * | | netfilter: nft_set_pipapo: no need to call pipapo_deactivate() from flushPablo Neira Ayuso2023-10-241-2/+3
| * | | netfilter: nf_tables: Carry reset boolean in nft_obj_dump_ctxPhil Sutter2023-10-241-6/+6
| * | | netfilter: nf_tables: nft_obj_filter fits into cb->ctxPhil Sutter2023-10-241-11/+5
| * | | netfilter: nf_tables: Carry s_idx in nft_obj_dump_ctxPhil Sutter2023-10-241-4/+5
| * | | netfilter: nf_tables: A better name for nft_obj_filterPhil Sutter2023-10-241-16/+16
| * | | netfilter: nf_tables: Unconditionally allocate nft_obj_filterPhil Sutter2023-10-241-21/+15
| * | | netfilter: nf_tables: Drop pointless memset in nf_tables_dump_objPhil Sutter2023-10-241-3/+0
| * | | netfilter: conntrack: switch connlabels to atomic_tFlorian Westphal2023-10-241-9/+8
| * | | netfilter: nf_tables: Add locking for NFT_MSG_GETRULE_RESET requestsPhil Sutter2023-10-241-13/+64
| * | | netfilter: nf_tables: Introduce nf_tables_getrule_single()Phil Sutter2023-10-241-31/+43
| * | | netfilter: nf_tables: Open-code audit log call in nf_tables_getrule()Phil Sutter2023-10-241-4/+15
| * | | netfilter: nft_set_rbtree: prefer sync gc to async workerFlorian Westphal2023-10-241-59/+65
| * | | netfilter: nft_set_rbtree: rename gc deactivate+erase functionFlorian Westphal2023-10-241-5/+6
* | | | tcp: introduce tcp_clock_ms()Eric Dumazet2023-10-231-1/+1
|/ / /
* | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2023-10-196-39/+40
|\| |
| * | netfilter: nf_tables: revert do not remove elements if set backend implements...Pablo Neira Ayuso2023-10-181-4/+1
| * | netfilter: nft_set_rbtree: .deactivate fails if element has expiredPablo Neira Ayuso2023-10-181-0/+2
| * | netfilter: nf_tables: audit log object reset once per tablePhil Sutter2023-10-181-22/+28
| * | netfilter: nft_payload: fix wrong mac header matchingFlorian Westphal2023-10-121-1/+1
| * | nf_tables: fix NULL pointer dereference in nft_expr_inner_parse()Xingyuan Mo2023-10-121-1/+1
| * | nf_tables: fix NULL pointer dereference in nft_inner_init()Xingyuan Mo2023-10-121-0/+1
| * | netfilter: nf_tables: do not refresh timeout when resetting elementPablo Neira Ayuso2023-10-121-13/+5