aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter/x_tables.c (follow)
AgeCommit message (Expand)AuthorFilesLines
2018-03-05netfilter: x_tables: check standard verdicts in coreFlorian Westphal1-6/+43
2018-02-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-40/+34
2018-02-19net: Convert ip_tables_net_ops, udplite6_net_ops and xt_net_opsKirill Tkhai1-0/+1
2018-02-14netfilter: x_tables: use pr ratelimiting in xt coreFlorian Westphal1-36/+34
2018-02-08netfilter: x_tables: remove size checkMichal Hocko1-4/+0
2018-02-02netfilter: x_tables: make allocation less aggressiveMichal Hocko1-1/+6
2018-02-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller1-2/+7
2018-01-25netfilter: x_tables: avoid out-of-bounds reads in xt_request_find_{match|target}Eric Dumazet1-0/+6
2018-01-19netfilter: delete /proc THIS_MODULE referencesAlexey Dobriyan1-3/+0
2018-01-16netfilter: x_tables: don't return garbage pointer on modprobe failureFlorian Westphal1-1/+1
2018-01-10netfilter: x_tables: unbreak module auto loadingFlorian Westphal1-1/+1
2018-01-08netfilter: xtables: add and use xt_request_find_table_lockFlorian Westphal1-9/+27
2018-01-08netfilter: mark expected switch fall-throughsGustavo A. R. Silva1-1/+1
2018-01-07netfilter: x_tables: fix int overflow in xt_alloc_table_info()Dmitry Vyukov1-2/+1
2017-11-20netfilter: exit_net cleanup check addedVasily Averin1-0/+9
2017-11-08Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-3/+18
2017-10-24netfilter: x_tables: make xt_replace_table wait until old rules are not used anymoreFlorian Westphal1-3/+18
2017-10-06netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_userEric Dumazet1-2/+2
2017-08-19netfilter: use audit_log()Geliang Tang1-10/+4
2017-07-12net/netfilter/x_tables.c: use kvmalloc() in xt_alloc_table_info()Michal Hocko1-8/+4
2017-05-18netfilter: xtables: fix build failure from COMPAT_XT_ALIGN outside CONFIG_COMPATWillem de Bruijn1-8/+13
2017-05-15netfilter: xtables: zero padding in data_to_userWillem de Bruijn1-3/+6
2017-05-08mm, vmalloc: use __GFP_HIGHMEM implicitlyMichal Hocko1-2/+1
2017-05-08treewide: use kv[mz]alloc* rather than opencoded variantsMichal Hocko1-17/+4
2017-04-28netfilter: x_tables: unlock on error in xt_find_table_lock()Dan Carpenter1-1/+3
2017-02-27scripts/spelling.txt: add "aligment" pattern and fix typo instancesMasahiro Yamada1-1/+1
2017-01-09xtables: use match, target and data copy_to_user helpers in compatWillem de Bruijn1-10/+4
2017-01-09xtables: add xt_match, xt_target and data copy_to_user functionsWillem de Bruijn1-0/+54
2016-12-07netfilter: x_tables: avoid warn and OOM killer on vmalloc callMarcelo Ricardo Leitner1-1/+3
2016-12-06netfilter: x_tables: pack percpu counter allocationsFlorian Westphal1-9/+24
2016-12-06netfilter: x_tables: pass xt_counters struct to counter allocatorFlorian Westphal1-0/+30
2016-12-06netfilter: x_tables: pass xt_counters struct instead of packet counterFlorian Westphal1-0/+9
2016-11-13netfilter: x_tables: simplify IS_ERR_OR_NULL to NULL testJulia Lawall1-1/+1
2016-10-19netfilter: x_tables: suppress kmemcheck warningFlorian Westphal1-1/+1
2016-07-18netfilter: x_tables: speed up jump target validationFlorian Westphal1-0/+50
2016-07-06Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-0/+3
2016-06-23netfilter: x_tables: fix possible ZERO_SIZE_PTR pointer dereferencing error.Xiubo Li1-0/+3
2016-06-02netfilter: x_tables: don't reject valid target size on some architecturesFlorian Westphal1-2/+2
2016-04-14netfilter: x_tables: introduce and use xt_copy_counters_from_userFlorian Westphal1-0/+74
2016-04-14netfilter: x_tables: do compat validation via translate_tableFlorian Westphal1-0/+8
2016-04-14netfilter: x_tables: xt_compat_match_from_user doesn't need a retvalFlorian Westphal1-3/+2
2016-04-14netfilter: x_tables: validate all offsets and sizes in a ruleFlorian Westphal1-5/+76
2016-04-14netfilter: x_tables: check for bogus target offsetFlorian Westphal1-2/+15
2016-04-14netfilter: x_tables: check standard target size tooFlorian Westphal1-0/+15
2016-04-14netfilter: x_tables: add compat version of xt_check_entry_offsetsFlorian Westphal1-0/+22
2016-04-14netfilter: x_tables: assert minimum target sizeFlorian Westphal1-0/+3
2016-04-14netfilter: x_tables: add and use xt_check_entry_offsetsFlorian Westphal1-0/+34
2016-03-12netfilter: x_tables: check for size overflowFlorian Westphal1-0/+3
2016-03-02netfilter: xtables: don't hook tables by defaultFlorian Westphal1-25/+40
2015-11-25netfilter: Set /proc/net entries owner to root in namespacePhilip Whineray1-0/+12