aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter (follow)
AgeCommit message (Expand)AuthorFilesLines
2022-08-09netfilter: nf_tables: fix null deref due to zeroed list headFlorian Westphal1-0/+1
2022-08-09netfilter: nf_tables: disallow jump to implicit chain from set elementPablo Neira Ayuso1-0/+4
2022-08-09netfilter: nf_tables: upfront validation of data via nft_data_init()Pablo Neira Ayuso5-113/+124
2022-08-09netfilter: nf_tables: do not allow RULE_ID to refer to another chainThadeu Lima de Souza Cascardo1-2/+5
2022-08-09netfilter: nf_tables: do not allow CHAIN_ID to refer to another tableThadeu Lima de Souza Cascardo1-2/+4
2022-08-09netfilter: nf_tables: do not allow SET_ID to refer to another tableThadeu Lima de Souza Cascardo1-1/+3
2022-08-09netfilter: nf_tables: validate variable length element extensionPablo Neira Ayuso2-16/+70
2022-08-05netfilter: flowtable: fix incorrect Kconfig dependenciesPablo Neira Ayuso1-2/+1
2022-08-05netfilter: nf_tables: fix crash when nf_trace is enabledFlorian Westphal1-11/+10
2022-07-28Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski3-1/+39
2022-07-26netfilter: nft_queue: only allow supported familes and hooksFlorian Westphal1-0/+27
2022-07-26netfilter: nf_tables: add rescheduling points during loop detection walksFlorian Westphal1-0/+6
2022-07-26netfilter: nf_queue: do not allow packet truncation below transport header offsetFlorian Westphal1-1/+6
2022-07-22Merge https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-nextJakub Kicinski3-139/+342
2022-07-21net: netfilter: Add kfuncs to set and change CT statusLorenzo Bianconi3-37/+74
2022-07-21net: netfilter: Add kfuncs to set and change CT timeoutKumar Kartikeya Dwivedi3-11/+58
2022-07-21net: netfilter: Add kfuncs to allocate and insert CTLorenzo Bianconi2-27/+189
2022-07-21net: netfilter: Deduplicate code in bpf_{xdp,skb}_ct_lookupKumar Kartikeya Dwivedi1-34/+18
2022-07-21bpf: Switch to new kfunc flags infrastructureKumar Kartikeya Dwivedi1-38/+11
2022-07-21Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-1/+1
2022-07-20Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-nextJakub Kicinski31-260/+385
2022-07-21netfilter: xt_TPROXY: remove pr_debug invocationsJustin Stitt1-23/+2
2022-07-21netfilter: flowtable: prefer refcount_incFlorian Westphal1-8/+3
2022-07-21netfilter: ipvs: Use the bitmap API to allocate bitmapsChristophe JAILLET1-3/+2
2022-07-15ip: Fix data-races around sysctl_ip_default_ttl.Kuniyuki Iwashima1-1/+1
2022-07-11netfilter: nf_tables: move nft_cmp_fast_mask to where its usedFlorian Westphal1-0/+12
2022-07-11netfilter: nf_tables: use correct integer typesFlorian Westphal4-11/+12
2022-07-11netfilter: nf_tables: add and use BE register load-store helpersFlorian Westphal1-3/+3
2022-07-11netfilter: nf_tables: use the correct get/put helpersFlorian Westphal4-10/+11
2022-07-11netfilter: x_tables: use correct integer typesFlorian Westphal3-9/+9
2022-07-11netfilter: nfnetlink: add missing __be16 castFlorian Westphal1-1/+1
2022-07-11netfilter: nft_set_bitmap: Fix spelling mistakeZhang Jiaming1-2/+2
2022-07-11netfilter: h323: merge nat hook pointers into oneFlorian Westphal1-161/+99
2022-07-11netfilter: nf_conntrack: use rcu accessors where neededFlorian Westphal7-16/+57
2022-07-11netfilter: nf_conntrack: add missing __rcu annotationsFlorian Westphal3-3/+3
2022-07-11netfilter: nf_flow_table: count pending offload workqueue tasksVlad Buslov5-4/+165
2022-07-11netfilter: conntrack: use correct format charactersBill Wendling1-1/+1
2022-07-11netfilter: conntrack: use fallthrough to cleanupJackie Liu1-5/+3
2022-07-09netfilter: nf_tables: replace BUG_ON by element length checkPablo Neira Ayuso1-21/+51
2022-07-09netfilter: nf_log: incorrect offset to network headerPablo Neira Ayuso1-4/+4
2022-07-07netfilter: conntrack: fix crash due to confirmed bit load reorderingFlorian Westphal3-0/+26
2022-07-02netfilter: nft_set_pipapo: release elements in clone from abort pathPablo Neira Ayuso1-15/+33
2022-07-02netfilter: nf_tables: stricter validation of element dataPablo Neira Ayuso1-1/+8
2022-06-27netfilter: nf_tables: avoid skb access on nf_stolenFlorian Westphal2-23/+45
2022-06-27netfilter: nft_dynset: restore set element counter when failing to updatePablo Neira Ayuso1-0/+2
2022-06-21netfilter: nf_dup_netdev: add and use recursion counterFlorian Westphal1-4/+15
2022-06-21netfilter: nf_dup_netdev: do not push mac header a second timeFlorian Westphal1-4/+10
2022-06-17netfilter: cttimeout: fix slab-out-of-bounds read typo in cttimeout_net_exitFlorian Westphal1-1/+1
2022-06-08netfilter: use get_random_u32 instead of prandomFlorian Westphal2-20/+5
2022-06-06netfilter: nf_tables: bail out early if hardware offload is not supportedPablo Neira Ayuso2-2/+23