summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: nftables: relax check for stateful expressions in set definitionPablo Neira Ayuso2021-02-091-13/+15
* netfilter: conntrack: skip identical origin tuple in same zone onlyFlorian Westphal2021-02-091-1/+2
* netfilter: flowtable: fix tcp and udp header checksum updateSven Auhagen2021-02-041-2/+2
* netfilter: nftables: fix possible UAF over chains from packet path in netnsPablo Neira Ayuso2021-02-041-6/+19
* netfilter: xt_recent: Fix attempt to update deleted entryJozsef Kadlecsik2021-02-041-2/+10
* netfilter: nft_dynset: dump expressions when set definition contains no expre...Pablo Neira Ayuso2021-01-161-14/+17
* netfilter: nft_dynset: add timeout extension to templatePablo Neira Ayuso2021-01-161-1/+3
* netfilter: nft_dynset: honor stateful expressions in set definitionPablo Neira Ayuso2021-01-162-3/+8
* netfilter: nf_nat: Fix memleak in nf_nat_initDinghao Liu2021-01-111-0/+1
* netfilter: conntrack: fix reading nf_conntrack_bucketsJesper Dangaard Brouer2021-01-101-0/+3
* netfilter: nftables: add set expression flagsPablo Neira Ayuso2020-12-282-3/+12
* netfilter: nft_dynset: report EOPNOTSUPP on missing set featurePablo Neira Ayuso2020-12-281-3/+3
* netfilter: xt_RATEEST: reject non-null terminated string from userspaceFlorian Westphal2020-12-271-0/+3
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfJakub Kicinski2020-12-182-26/+20
|\
| * netfilter: ipset: fix shift-out-of-bounds in htable_bits()Vasily Averin2020-12-171-15/+5
| * netfilter: ipset: fixes possible oops in mtype_resizeVasily Averin2020-12-171-9/+13
| * netfilter: nftables: fix incorrect increment of loop counterColin Ian King2020-12-161-2/+2
* | Merge tag 'selinux-pr-20201214' of git://git.kernel.org/pub/scm/linux/kernel/...Linus Torvalds2020-12-161-1/+1
|\ \ | |/ |/|
| * lsm,selinux: pass flowi_common instead of flowi to the LSM hooksPaul Moore2020-11-231-1/+1
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextJakub Kicinski2020-12-1412-105/+450
|\ \
| * | netfilter: nftables: netlink support for several set element expressionsPablo Neira Ayuso2020-12-122-6/+143
| * | netfilter: nftables: generalize set extension to support for several expressionsPablo Neira Ayuso2020-12-123-47/+168
| * | netfilter: nftables: generalize set expressions supportPablo Neira Ayuso2020-12-122-27/+66
| * | netfilter: ctnetlink: add timeout and protoinfo to destroy eventsFlorian Westphal2020-12-124-22/+48
| * | netfilter: use actual socket sk for REJECT actionJan Engelhardt2020-12-011-2/+4
| * | netfilter: nfnl_acct: remove data from struct netWang Shanker2020-12-011-9/+29
| * | netfilter: Remove unnecessary conversion to boolKaixu Xia2020-12-011-1/+1
| * | ipvs: replace atomic_add_return()Yejune Deng2020-11-222-3/+3
* | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2020-12-114-41/+26
|\ \ \
| * | | netfilter: nft_ct: Remove confirmation check for NFT_CT_IDBrett Mastbergen2020-12-091-2/+0
| * | | netfilter: nftables: comment indirect serialization of commit_mutex with rtnl...Pablo Neira Ayuso2020-12-081-0/+4
| * | | netfilter: nft_dynset: fix timeouts later than 23 daysPablo Neira Ayuso2020-12-082-5/+7
| * | | netfilter: x_tables: Switch synchronization to RCUSubash Abhinov Kasiviswanathan2020-12-081-34/+15
* | | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2020-12-037-38/+110
|\| | | | |/ / |/| |
| * | netfilter: nftables_offload: build mask based from the matching bytesPablo Neira Ayuso2020-11-273-29/+61
| * | netfilter: nftables_offload: set address type in control dissectorPablo Neira Ayuso2020-11-272-0/+21
| * | ipvs: fix possible memory leak in ip_vs_control_net_initWang Hai2020-11-271-6/+25
| * | netfilter: nf_tables: avoid false-postive lockdep splatFlorian Westphal2020-11-261-1/+2
| * | netfilter: ipset: prevent uninit-value in hash_ip6_addEric Dumazet2020-11-261-2/+1
* | | net: openvswitch: Be liberal in tcp conntrack.Numan Siddique2020-11-201-6/+0
* | | treewide: rename nla_strlcpy to nla_strscpy.Francis Laniel2020-11-166-10/+10
* | | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2020-11-068-21/+41
|\| |
| * | netfilter: ipset: Update byte and packet counters regardless of whether they ...Stefano Brivio2020-10-311-1/+2
| * | netfilter: nf_tables: missing validation from the abort pathPablo Neira Ayuso2020-10-302-9/+28
| * | netfilter: use actual socket sk rather than skb sk when routing harderJason A. Donenfeld2020-10-305-9/+9
| * | netfilter: nftables: fix netlink report logic in flowtable and genidPablo Neira Ayuso2020-10-301-2/+2
| |/
* | netfilter: nft_reject_inet: allow to use reject from inet ingressPablo Neira Ayuso2020-11-011-1/+13
* | netfilter: nftables: Add __printf() attributeAndrew Lunn2020-11-011-1/+2
* | netfilter: ipset: Expose the initval hash parameter to userspaceJozsef Kadlecsik2020-10-3113-16/+33
* | netfilter: ipset: Add bucketsize parameter to all hash typesJozsef Kadlecsik2020-10-3114-39/+71