summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
2018-06-16netfilter: IDLETIMER: be syzkaller friendlyEric Dumazet
2018-06-16netfilter: nat: cope with negative port rangePaolo Abeni
2018-06-16netfilter: x_tables: fix missing timer initialization in xt_LEDPaolo Abeni
2018-06-16netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insertCong Wang
2018-03-03netfilter: xt_bpf: add overflow checksJann Horn
2018-02-13netfilter: xt_TCPMSS: add more sanity tests on tcph->doffEric Dumazet
2018-01-01netfilter: xt_osf: Add missing permission checksKevin Cernekee
2018-01-01netfilter: nfnetlink_cthelper: Add missing permission checksKevin Cernekee
2018-01-01netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_...Eric Dumazet
2018-01-01netfilter: ipset: pernet ops must be unregistered lastFlorian Westphal
2017-11-11netfilter; Add some missing default cases to switch statements in nft_reject.David S. Miller
2017-11-11netfilter: Fix switch statement warnings with recent gcc.David Miller
2017-11-11ipv6: Add rt6_get_cookie() functionMartin KaFai Lau
2017-09-15netfilter: ctnetlink: fix incorrect nf_ct_put during hash resizeLiping Zhang
2017-08-26netfilter: ctnetlink: make it safer when updating ct->statusLiping Zhang
2017-08-26netfilter: ctnetlink: fix deadlock due to acquire _expect_lock twiceLiping Zhang
2017-03-16netfilter: nft_log: restrict the log prefix length to 127Liping Zhang
2017-02-23netfilter: nfnetlink: correctly validate length of batch messagesPhil Turnbull
2017-02-23netfilter: nf_tables: destroy the set if fail to add transactionLiping Zhang
2017-02-23netfilter: nf_tables: fix type mismatch with error return from nft_parse_u32_...John W. Linville
2017-02-23netfilter: nf_conntrack_sip: extend request line validationUlrich Weber
2017-02-23netfilter: nf_tables: underflow in nft_parse_u32_check()Dan Carpenter
2017-02-23netfilter: nf_tables: validate maximum value of u32 netlink attributesLaura Garcia Liebana
2017-02-23netfilter: nft_exthdr: Add size check on u8 nft_exthdr attributesLaura Garcia Liebana
2017-02-23netfilter: restart search if moved to other chainFlorian Westphal
2016-11-20netfilter: nfnetlink_queue: reject verdict request from different portidLiping Zhang
2016-11-20netfilter: nf_ct_expect: remove the redundant slash when policy name is emptyLiping Zhang
2016-11-20netfilter: x_tables: speed up jump target validationFlorian Westphal
2016-08-22netfilter: x_tables: introduce and use xt_copy_counters_from_userFlorian Westphal
2016-08-22netfilter: x_tables: do compat validation via translate_tableFlorian Westphal
2016-08-22netfilter: x_tables: xt_compat_match_from_user doesn't need a retvalFlorian Westphal
2016-08-22netfilter: x_tables: don't reject valid target size on some architecturesFlorian Westphal
2016-08-22netfilter: x_tables: validate all offsets and sizes in a ruleFlorian Westphal
2016-08-22netfilter: x_tables: check for bogus target offsetFlorian Westphal
2016-08-22netfilter: x_tables: check standard target size tooFlorian Westphal
2016-08-22netfilter: x_tables: add compat version of xt_check_entry_offsetsFlorian Westphal
2016-08-22netfilter: x_tables: assert minimum target sizeFlorian Westphal
2016-08-22netfilter: x_tables: add and use xt_check_entry_offsetsFlorian Westphal
2016-06-15nf_conntrack: avoid kernel pointer value leak in slab nameLinus Torvalds
2016-05-01ipvs: correct initial offset of Call-ID header search in SIP persistence engineMarco Angaroni
2015-12-18netfilter: nf_tables: fix bogus warning in nft_data_uninit()Mirek Kratochvil
2015-12-13netfilter: nfnetlink: don't probe module if it existsFlorian Westphal
2015-10-19netfilter: nft_compat: skip family comparison in case of NFPROTO_UNSPECPablo Neira Ayuso
2015-09-30netlink, mmap: fix edge-case leakages in nf queue zero-copyDaniel Borkmann
2015-08-25netfilter: nf_conntrack: Support expectations in different zonesJoe Stringer
2015-08-25ipvs: fix crash with sync protocol v0 and FTPJulian Anastasov
2015-08-25ipvs: fix crash if scheduler is changedJulian Anastasov
2015-08-25ipvs: do not use random local source address for tunnelsJulian Anastasov
2015-08-25netfilter: ctnetlink: put back references to master ct and expect objectsPablo Neira Ayuso
2015-07-20netfilter: nfnetlink_cthelper: Remove 'const' and '&' to avoid warningsChen Gang
generated by cgit v1.2.3 (git 2.39.1) at 2024-07-13 00:20:53 +0000