summaryrefslogtreecommitdiffstats
path: root/net/netfilter
AgeCommit message (Expand)AuthorLines
2018-07-24netfilter: nf_tables: move dumper state allocation into ->startFlorian Westphal-104/+115
2018-07-20netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior stateFlorian Westphal-4/+4
2018-07-20netfilter: nf_tables: don't allow to rename to already-pending nameFlorian Westphal-13/+29
2018-07-20netfilter: nf_tables: fix memory leaks on chain renameFlorian Westphal-6/+11
2018-07-20netfilter: nf_tables: free flow table struct tooFlorian Westphal-0/+1
2018-07-20netfilter: nf_tables: use dev->name directlyFlorian Westphal-9/+5
2018-07-18netfilter: nft_set_rbtree: fix panic when destroying set by GCTaehee Yoo-2/+5
2018-07-18netfilter: nft_set_hash: add rcu_barrier() in the nft_rhash_destroy()Taehee Yoo-0/+1
2018-07-17netfilter: nf_tables: fix jumpstack depth validationTaehee Yoo-9/+18
2018-07-09netfilter: nf_conntrack: Fix possible possible crash on module loading.Andrey Ryabinin-1/+1
2018-07-09netfilter: nft_compat: explicitly reject ERROR and standard targetFlorian Westphal-0/+13
2018-07-06netfilter: nf_tables: place all set backends in one single modulePablo Neira Ayuso-83/+44
2018-07-06netfilter: nf_tproxy: fix possible non-linear access to transport headerMáté Eckl-4/+4
2018-06-26netfilter: nf_conncount: fix garbage collection confirm raceFlorian Westphal-5/+47
2018-06-26netfilter: nf_log: don't hold nf_log_mutex during user accessJann Horn-3/+6
2018-06-26netfilter: nf_log: fix uninit read in nf_log_proc_dostringJann Horn-0/+4
2018-06-18netfilter: nf_ct_helper: Fix possible panic after nf_conntrack_helper_unregisterGao Feng-0/+5
2018-06-18netfilter: nf_queue: augment nfqa_cfg_policyEric Dumazet-0/+3
2018-06-16Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netLinus Torvalds-33/+79
2018-06-12treewide: Use array_size() in vmalloc()Kees Cook-1/+2
2018-06-12treewide: kzalloc() -> kcalloc()Kees Cook-3/+4
2018-06-12treewide: kmalloc() -> kmalloc_array()Kees Cook-6/+8
2018-06-12netfilter: nf_conncount: Fix garbage collection with zonesYi-Hung Wei-5/+10
2018-06-12netfilter: xt_connmark: fix list corruption on rmmodFlorian Westphal-1/+1
2018-06-12netfilter: ctnetlink: avoid null pointer dereferenceFlorian Westphal-1/+2
2018-06-12netfilter: nf_tables: use WARN_ON_ONCE instead of BUG_ON in nft_do_chain()Taehee Yoo-1/+2
2018-06-12netfilter: nf_tables: close race between netns exit and rmmodFlorian Westphal-3/+15
2018-06-12netfilter: nf_tables: fix module unload raceFlorian Westphal-6/+16
2018-06-12netfilter: nft_dynset: do not reject set updates with NFT_SET_EVALPablo Neira Ayuso-3/+1
2018-06-12netfilter: nft_socket: fix module autoloadPablo Neira Ayuso-0/+1
2018-06-11Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller-13/+31
2018-06-07netfilter: nf_tables: add NFT_LOGLEVEL_* enumeration and use itPablo Neira Ayuso-5/+5
2018-06-06Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds-1840/+4792
2018-06-06Merge tag 'overflow-v4.18-rc1' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds-2/+1
2018-06-06Merge tag 'audit-pr-20180605' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds-1/+1
2018-06-06treewide: Use struct_size() for kmalloc()-familyKees Cook-2/+1
2018-06-06netfilter: nft_set_rbtree: fix parameter of __nft_rbtree_lookup()Taehee Yoo-1/+1
2018-06-06netfilter: ipset: forbid family for hash:mac setsFlorent Fourcot-1/+4
2018-06-06netfilter: ipset: Limit max timeout valueJozsef Kadlecsik-4/+4
2018-06-06netfilter: xt_set: Check hook mask correctlySerhey Popovych-1/+1
2018-06-04Merge branch 'hch.procfs' of git://git.kernel.org/pub/scm/linux/kernel/git/vi...Linus Torvalds-344/+63
2018-06-04ipvs: fix check on xmit to non-local addressesJulian Anastasov-1/+1
2018-06-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller-42/+69
2018-06-03netfilter: nf_tables: handle chain name lookups via rhltableFlorian Westphal-15/+98
2018-06-03netfilter: nf_tables: add connlimit supportPablo Neira Ayuso-0/+307
2018-06-03netfilter: nf_tables: add destroy_clone expressionPablo Neira Ayuso-2/+11
2018-06-03netfilter: nf_tables: garbage collection for stateful expressionsPablo Neira Ayuso-2/+28
2018-06-03netfilter: nf_tables: pass ctx to nf_tables_expr_destroy()Pablo Neira Ayuso-4/+12
2018-06-03netfilter: nf_conncount: expose connection list interfacePablo Neira Ayuso-13/+23
2018-06-03netfilter: nf_tables: pass context to object destroy indirectionPablo Neira Ayuso-8/+10