summaryrefslogtreecommitdiffstats
path: root/net/netfilter/x_tables.c
AgeCommit message (Expand)AuthorFilesLines
2018-03-30Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-17/+174
2018-03-30netfilter: x_tables: Add note about how to free percpu countersBen Hutchings1-1/+3
2018-03-27net: Drop pernet_operations::asyncKirill Tkhai1-1/+0
2018-03-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+30
2018-03-13netfilter: x_tables: fix build with CONFIG_COMPAT=nFlorian Westphal1-31/+31
2018-03-11netfilter: x_tables: add and use xt_check_proc_nameFlorian Westphal1-0/+30
2018-03-05netfilter: x_tables: make sure compat af mutex is heldFlorian Westphal1-0/+6
2018-03-05netfilter: compat: reject huge allocation requestsFlorian Westphal1-8/+18
2018-03-05netfilter: compat: prepare xt_compat_init_offsets to return errorsFlorian Westphal1-1/+3
2018-03-05netfilter: x_tables: add counters allocation wrapperFlorian Westphal1-0/+15
2018-03-05netfilter: x_tables: limit allocation requests for blob rule headsFlorian Westphal1-0/+3
2018-03-05netfilter: x_tables: cap allocations at 512 mbyteFlorian Westphal1-1/+2
2018-03-05netfilter: x_tables: enforce unique and ascending entry pointsFlorian Westphal1-1/+30
2018-03-05netfilter: x_tables: move hook entry checks into coreFlorian Westphal1-0/+29
2018-03-05netfilter: x_tables: check error target size tooFlorian Westphal1-0/+23
2018-03-05netfilter: x_tables: check standard verdicts in coreFlorian Westphal1-6/+43
2018-02-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-40/+34
2018-02-19net: Convert ip_tables_net_ops, udplite6_net_ops and xt_net_opsKirill Tkhai1-0/+1
2018-02-14netfilter: x_tables: use pr ratelimiting in xt coreFlorian Westphal1-36/+34
2018-02-08netfilter: x_tables: remove size checkMichal Hocko1-4/+0
2018-02-02netfilter: x_tables: make allocation less aggressiveMichal Hocko1-1/+6
2018-02-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller1-2/+7
2018-01-25netfilter: x_tables: avoid out-of-bounds reads in xt_request_find_{match|target}Eric Dumazet1-0/+6
2018-01-19netfilter: delete /proc THIS_MODULE referencesAlexey Dobriyan1-3/+0
2018-01-16netfilter: x_tables: don't return garbage pointer on modprobe failureFlorian Westphal1-1/+1
2018-01-10netfilter: x_tables: unbreak module auto loadingFlorian Westphal1-1/+1
2018-01-08netfilter: xtables: add and use xt_request_find_table_lockFlorian Westphal1-9/+27
2018-01-08netfilter: mark expected switch fall-throughsGustavo A. R. Silva1-1/+1
2018-01-07netfilter: x_tables: fix int overflow in xt_alloc_table_info()Dmitry Vyukov1-2/+1
2017-11-20netfilter: exit_net cleanup check addedVasily Averin1-0/+9
2017-11-08Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-3/+18
2017-10-24netfilter: x_tables: make xt_replace_table wait until old rules are not used ...Florian Westphal1-3/+18
2017-10-06netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_...Eric Dumazet1-2/+2
2017-08-19netfilter: use audit_log()Geliang Tang1-10/+4
2017-07-12net/netfilter/x_tables.c: use kvmalloc() in xt_alloc_table_info()Michal Hocko1-8/+4
2017-05-18netfilter: xtables: fix build failure from COMPAT_XT_ALIGN outside CONFIG_COMPATWillem de Bruijn1-8/+13
2017-05-15netfilter: xtables: zero padding in data_to_userWillem de Bruijn1-3/+6
2017-05-08mm, vmalloc: use __GFP_HIGHMEM implicitlyMichal Hocko1-2/+1
2017-05-08treewide: use kv[mz]alloc* rather than opencoded variantsMichal Hocko1-17/+4
2017-04-28netfilter: x_tables: unlock on error in xt_find_table_lock()Dan Carpenter1-1/+3
2017-02-27scripts/spelling.txt: add "aligment" pattern and fix typo instancesMasahiro Yamada1-1/+1
2017-01-09xtables: use match, target and data copy_to_user helpers in compatWillem de Bruijn1-10/+4
2017-01-09xtables: add xt_match, xt_target and data copy_to_user functionsWillem de Bruijn1-0/+54
2016-12-07netfilter: x_tables: avoid warn and OOM killer on vmalloc callMarcelo Ricardo Leitner1-1/+3
2016-12-06netfilter: x_tables: pack percpu counter allocationsFlorian Westphal1-9/+24
2016-12-06netfilter: x_tables: pass xt_counters struct to counter allocatorFlorian Westphal1-0/+30
2016-12-06netfilter: x_tables: pass xt_counters struct instead of packet counterFlorian Westphal1-0/+9
2016-11-13netfilter: x_tables: simplify IS_ERR_OR_NULL to NULL testJulia Lawall1-1/+1
2016-10-19netfilter: x_tables: suppress kmemcheck warningFlorian Westphal1-1/+1
2016-07-18netfilter: x_tables: speed up jump target validationFlorian Westphal1-0/+50