summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: ipset: Limit max timeout valueJozsef Kadlecsik2018-06-061-4/+4
* netfilter: xt_set: Check hook mask correctlySerhey Popovych2018-06-061-1/+1
* ipvs: fix check on xmit to non-local addressesJulian Anastasov2018-06-041-1/+1
* ipvs: register conntrack hooks for ftpJulian Anastasov2018-06-021-0/+4
* netfilter: nf_tables: check msg_type before nft_trans_set(trans)Alexey Kodanev2018-06-011-5/+6
* netfilter: xt_CT: Reject the non-null terminated string from user spaceGao Feng2018-06-011-0/+10
* netfilter: nf_tables: increase nft_counters_enabled in nft_chain_stats_replace()Taehee Yoo2018-05-291-1/+3
* netfilter: nf_tables: fix NULL-ptr in nf_tables_dump_obj()Taehee Yoo2018-05-291-2/+2
* netfilter: nf_tables: disable preemption in nft_update_chain_stats()Pablo Neira Ayuso2018-05-291-2/+2
* netfilter: provide correct argument to nla_strlcpy()Eric Dumazet2018-05-242-3/+3
* ipvs: fix buffer overflow with sync daemon and serviceJulian Anastasov2018-05-231-6/+15
* netfilter: nft_limit: fix packet ratelimitingPablo Neira Ayuso2018-05-231-14/+24
* netfilter: nft_meta: fix wrong value dereference in nft_meta_set_evalTaehee Yoo2018-05-231-6/+8
* netfilter: nf_tables: fix NULL pointer dereference on nft_ct_helper_obj_dump()Taehee Yoo2018-05-171-8/+12
* netfilter: nf_tables: fix memory leak on error exit returnColin Ian King2018-05-141-2/+4
* netfilter: nf_tables: bogus EBUSY in chain deletionsPablo Neira Ayuso2018-05-092-7/+54
* netfilter: nft_compat: fix handling of large matchinfo sizeFlorian Westphal2018-05-091-1/+63
* netfilter: nft_compat: prepare for indirect info storageFlorian Westphal2018-05-091-11/+36
* netfilter: nf_tables: don't assume chain stats are set when jumplabel is setFlorian Westphal2018-05-081-7/+14
* netfilter: prefer nla_strlcpy for dealing with NLA_STRING attributesFlorian Westphal2018-05-082-4/+5
* netfilter: core: add missing __rcu annotationFlorian Westphal2018-05-081-1/+2
* ipvs: fix stats update from local clientsJulian Anastasov2018-05-081-0/+12
* ipvs: fix refcount usage for conns in ops modeJulian Anastasov2018-05-081-11/+6Star
* netfilter: nf_tables: nft_compat: fix refcount leak on xt moduleFlorian Westphal2018-05-081-34/+58
* netfilter: nf_tables: skip synchronize_rcu if transaction log is emptyFlorian Westphal2018-04-271-8/+17
* netfilter: x_tables: check name length in find_match/target, tooFlorian Westphal2018-04-271-0/+6
* netfilter: Fix handling simultaneous open in TCP conntrackJozsef Kadlecsik2018-04-271-0/+11
* netfilter: xt_connmark: do not cast xt_connmark_tginfo1 to xt_connmark_tginfo2Pablo Neira Ayuso2018-04-191-16/+22
* netfilter: nf_tables: fix out-of-bounds in nft_chain_commit_updateTaehee Yoo2018-04-191-1/+1
* netfilter: conntrack: include kmemleak.h for kmemleak_not_leak()Stephen Rothwell2018-04-171-0/+1
* netfilter: nf_tables: free set name in error pathFlorian Westphal2018-04-161-3/+5
* netfilter: nf_tables: can't fail after linking rule into active rule listFlorian Westphal2018-04-161-27/+32
* netfilter: fix CONFIG_NF_REJECT_IPV6=m link errorArnd Bergmann2018-04-161-0/+1
* netfilter: conntrack: silent a memory leak warningCong Wang2018-04-161-0/+1
* netfilter: xt_connmark: Add bit mapping for bit-shift operation.Jack Ma2018-04-111-8/+11
* ipvs: fix rtnl_lock lockups caused by start_sync_threadJulian Anastasov2018-04-092-83/+80Star
* netfilter: nf_conntrack_sip: allow duplicate SDP expectationsFlorian Westphal2018-04-092-5/+16
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller2018-04-022-24/+84
|\
| * netfilter: nf_tables: do not hold reference on netdevice from preparation phasePablo Neira Ayuso2018-03-221-15/+4Star
| * netfilter: nf_tables: cache device name in flowtable objectPablo Neira Ayuso2018-03-221-6/+9
| * netfilter: nf_tables: add missing netlink attrs to policiesFlorian Westphal2018-03-201-0/+3
| * netfilter: nf_tables: permit second nat hook if colliding hook is going awayFlorian Westphal2018-03-201-1/+63
| * netfilter: nf_tables: meter: pick a set backend that supports updatesFlorian Westphal2018-03-202-2/+5
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2018-03-3039-429/+1001
|\ \
| * | netfilter: ipset: Use is_zero_ether_addr instead of static and memcmpJoe Perches2018-03-301-5/+2Star
| * | netfilter: x_tables: Add note about how to free percpu countersBen Hutchings2018-03-301-1/+3
| * | netfilter: Merge assignment with returnArushi Singhal2018-03-302-5/+3Star
| * | netfilter: nf_tables: use nft_set_lookup_global from nf_tables_newsetelem()Pablo Neira Ayuso2018-03-301-11/+4Star
| * | netfilter: nf_tables: rename to nft_set_lookup_global()Pablo Neira Ayuso2018-03-304-12/+14
| * | netfilter: nf_tables: enable conntrack if NAT chain is registeredPablo Neira Ayuso2018-03-301-7/+17