summaryrefslogtreecommitdiffstats
path: root/net/netfilter
AgeCommit message (Expand)AuthorFilesLines
2018-07-24netfilter: nf_tables: move dumper state allocation into ->startFlorian Westphal1-104/+115
2018-07-20netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior stateFlorian Westphal1-4/+4
2018-07-20netfilter: nf_tables: don't allow to rename to already-pending nameFlorian Westphal1-13/+29
2018-07-20netfilter: nf_tables: fix memory leaks on chain renameFlorian Westphal1-6/+11
2018-07-20netfilter: nf_tables: free flow table struct tooFlorian Westphal1-0/+1
2018-07-20netfilter: nf_tables: use dev->name directlyFlorian Westphal1-9/+5
2018-07-18netfilter: nft_set_rbtree: fix panic when destroying set by GCTaehee Yoo1-2/+5
2018-07-18netfilter: nft_set_hash: add rcu_barrier() in the nft_rhash_destroy()Taehee Yoo1-0/+1
2018-07-17netfilter: nf_tables: fix jumpstack depth validationTaehee Yoo3-9/+18
2018-07-09netfilter: nf_conntrack: Fix possible possible crash on module loading.Andrey Ryabinin1-1/+1
2018-07-09netfilter: nft_compat: explicitly reject ERROR and standard targetFlorian Westphal1-0/+13
2018-07-06netfilter: nf_tables: place all set backends in one single modulePablo Neira Ayuso6-83/+44
2018-07-06netfilter: nf_tproxy: fix possible non-linear access to transport headerMáté Eckl1-4/+4
2018-06-26netfilter: nf_conncount: fix garbage collection confirm raceFlorian Westphal1-5/+47
2018-06-26netfilter: nf_log: don't hold nf_log_mutex during user accessJann Horn1-3/+6
2018-06-26netfilter: nf_log: fix uninit read in nf_log_proc_dostringJann Horn1-0/+4
2018-06-18netfilter: nf_ct_helper: Fix possible panic after nf_conntrack_helper_unregisterGao Feng1-0/+5
2018-06-18netfilter: nf_queue: augment nfqa_cfg_policyEric Dumazet1-0/+3
2018-06-16Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netLinus Torvalds16-33/+79
2018-06-12treewide: Use array_size() in vmalloc()Kees Cook1-1/+2
2018-06-12treewide: kzalloc() -> kcalloc()Kees Cook2-3/+4
2018-06-12treewide: kmalloc() -> kmalloc_array()Kees Cook4-6/+8
2018-06-12netfilter: nf_conncount: Fix garbage collection with zonesYi-Hung Wei2-5/+10
2018-06-12netfilter: xt_connmark: fix list corruption on rmmodFlorian Westphal1-1/+1
2018-06-12netfilter: ctnetlink: avoid null pointer dereferenceFlorian Westphal1-1/+2
2018-06-12netfilter: nf_tables: use WARN_ON_ONCE instead of BUG_ON in nft_do_chain()Taehee Yoo1-1/+2
2018-06-12netfilter: nf_tables: close race between netns exit and rmmodFlorian Westphal2-3/+15
2018-06-12netfilter: nf_tables: fix module unload raceFlorian Westphal2-6/+16
2018-06-12netfilter: nft_dynset: do not reject set updates with NFT_SET_EVALPablo Neira Ayuso1-3/+1
2018-06-12netfilter: nft_socket: fix module autoloadPablo Neira Ayuso1-0/+1
2018-06-11Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller7-13/+31
2018-06-07netfilter: nf_tables: add NFT_LOGLEVEL_* enumeration and use itPablo Neira Ayuso1-5/+5
2018-06-06Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds74-1840/+4792
2018-06-06Merge tag 'overflow-v4.18-rc1' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds1-2/+1
2018-06-06Merge tag 'audit-pr-20180605' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-1/+1
2018-06-06treewide: Use struct_size() for kmalloc()-familyKees Cook1-2/+1
2018-06-06netfilter: nft_set_rbtree: fix parameter of __nft_rbtree_lookup()Taehee Yoo1-1/+1
2018-06-06netfilter: ipset: forbid family for hash:mac setsFlorent Fourcot1-1/+4
2018-06-06netfilter: ipset: Limit max timeout valueJozsef Kadlecsik1-4/+4
2018-06-06netfilter: xt_set: Check hook mask correctlySerhey Popovych1-1/+1
2018-06-04Merge branch 'hch.procfs' of git://git.kernel.org/pub/scm/linux/kernel/git/vi...Linus Torvalds11-344/+63
2018-06-04ipvs: fix check on xmit to non-local addressesJulian Anastasov1-1/+1
2018-06-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller8-42/+69
2018-06-03netfilter: nf_tables: handle chain name lookups via rhltableFlorian Westphal1-15/+98
2018-06-03netfilter: nf_tables: add connlimit supportPablo Neira Ayuso3-0/+307
2018-06-03netfilter: nf_tables: add destroy_clone expressionPablo Neira Ayuso2-2/+11
2018-06-03netfilter: nf_tables: garbage collection for stateful expressionsPablo Neira Ayuso2-2/+28
2018-06-03netfilter: nf_tables: pass ctx to nf_tables_expr_destroy()Pablo Neira Ayuso1-4/+12
2018-06-03netfilter: nf_conncount: expose connection list interfacePablo Neira Ayuso1-13/+23
2018-06-03netfilter: nf_tables: pass context to object destroy indirectionPablo Neira Ayuso3-8/+10