aboutsummaryrefslogtreecommitdiffstats
path: root/net/ipv4/netfilter/ip_tables.c (follow)
AgeCommit message (Expand)AuthorFilesLines
2017-04-07netfilter: Remove unnecessary cast on void pointersimran singhal1-12/+8
2017-01-09iptables: use match, target and data copy_to_user helpersWillem de Bruijn1-15/+6
2016-12-24Replace <asm/uaccess.h> with <linux/uaccess.h> globallyLinus Torvalds1-1/+1
2016-12-06netfilter: x_tables: pack percpu counter allocationsFlorian Westphal1-3/+6
2016-12-06netfilter: x_tables: pass xt_counters struct to counter allocatorFlorian Westphal1-4/+1
2016-12-06netfilter: x_tables: pass xt_counters struct instead of packet counterFlorian Westphal1-2/+2
2016-11-13netfilter: x_tables: simplify IS_ERR_OR_NULL to NULL testJulia Lawall1-10/+10
2016-11-03netfilter: x_tables: move hook state into xt_action_param structurePablo Neira Ayuso1-5/+1
2016-09-25netfilter: nft_log: complete NFTA_LOG_FLAGS attr supportLiping Zhang1-1/+1
2016-07-18netfilter: x_tables: speed up jump target validationFlorian Westphal1-21/+24
2016-07-03netfilter: Convert FWINV<[foo]> macros and uses to NF_INVFJoe Perches1-11/+9
2016-05-05netfilter: x_tables: get rid of old and inconsistent debuggingPablo Neira Ayuso1-204/+40
2016-04-29netfilter: fix IS_ERR_VALUE usagePablo Neira Ayuso1-2/+4
2016-04-14netfilter: x_tables: introduce and use xt_copy_counters_from_userFlorian Westphal1-43/+5
2016-04-14netfilter: x_tables: remove obsolete checkFlorian Westphal1-7/+0
2016-04-14netfilter: x_tables: remove obsolete overflow check for compat case tooFlorian Westphal1-2/+0
2016-04-14netfilter: x_tables: do compat validation via translate_tableFlorian Westphal1-126/+29
2016-04-14netfilter: x_tables: xt_compat_match_from_user doesn't need a retvalFlorian Westphal1-17/+9
2016-04-14netfilter: ip_tables: simplify translate_compat_table argsFlorian Westphal1-35/+24
2016-04-14netfilter: x_tables: check for bogus target offsetFlorian Westphal1-2/+3
2016-04-14netfilter: x_tables: add compat version of xt_check_entry_offsetsFlorian Westphal1-1/+2
2016-04-14netfilter: x_tables: kill check_entry helperFlorian Westphal1-12/+8
2016-04-14netfilter: x_tables: add and use xt_check_entry_offsetsFlorian Westphal1-11/+1
2016-04-14netfilter: x_tables: validate targets of jumpsFlorian Westphal1-0/+16
2016-04-14netfilter: x_tables: don't move to non-existent next ruleFlorian Westphal1-0/+4
2016-03-28netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIESPablo Neira Ayuso1-0/+2
2016-03-28netfilter: x_tables: fix unconditional helperFlorian Westphal1-12/+11
2016-03-28netfilter: x_tables: make sure e->next_offset covers remaining blob sizeFlorian Westphal1-2/+4
2016-03-28netfilter: x_tables: validate e->target_offset earlyFlorian Westphal1-9/+8
2016-03-02netfilter: xtables: don't hook tables by defaultFlorian Westphal1-14/+28
2016-03-02netfilter: xtables: prepare for on-demand hook registerFlorian Westphal1-11/+10
2015-10-16netfilter: ipv4: code indentationIan Morris1-3/+3
2015-10-16netfilter: ipv4: function definition layoutIan Morris1-3/+3
2015-10-16netfilter: ipv4: ternary operator layoutIan Morris1-3/+3
2015-10-16netfilter: ipv4: label placementIan Morris1-1/+1
2015-09-18netfilter: x_tables: Pass struct net in xt_action_paramEric W. Biederman1-0/+1
2015-09-18inet netfilter: Remove hook from ip6t_do_table, arp_do_table, ipt_do_tableEric W. Biederman1-1/+1
2015-09-17netfilter: Use nf_hook_state.netEric W. Biederman1-4/+4
2015-08-28Revert "netfilter: xtables: compute exact size needed for jumpstack"Florian Westphal1-18/+10
2015-07-15netfilter: xtables: remove __pure annotationFlorian Westphal1-1/+1
2015-07-15netfilter: add and use jump label for xt_teeFlorian Westphal1-1/+2
2015-07-15netfilter: xtables: don't save/restore jumpstack offsetFlorian Westphal1-17/+20
2015-07-15netfilter: xtables: compute exact size needed for jumpstackFlorian Westphal1-10/+18
2015-06-15netfilter: x_tables: remove XT_TABLE_INFO_SZ and a dereference.Eric Dumazet1-2/+2
2015-06-12netfilter: xtables: avoid percpu ruleset duplicationFlorian Westphal1-48/+16
2015-06-12netfilter: xtables: use percpu rule countersFlorian Westphal1-4/+27
2015-05-31Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-3/+1
2015-05-26netfilter: remove unused comefrom hookmask argumentFlorian Westphal1-3/+1
2015-05-20netfilter: ensure number of counters is >0 in do_replace()Dave Jones1-0/+6
2015-04-04netfilter: Pass nf_hook_state through ipt_do_table().David S. Miller1-7/+6