summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
2017-11-02netfilter: xt_TCPMSS: add more sanity tests on tcph->doffEric Dumazet
2017-11-02netfilter: nf_ct_ext: fix possible panic after nf_ct_extend_unregisterLiping Zhang
2017-11-02netfilter: invoke synchronize_rcu after set the _hook_ to NULLLiping Zhang
2017-11-01ipvs: SNAT packet replies only for NATed connectionsJulian Anastasov
2017-02-10netfilter: fix namespace handling in nf_log_proc_dostringJann Horn
2017-02-10ipvs: count pre-established TCP states as activeMichal Kubecek
2016-08-21netfilter: x_tables: introduce and use xt_copy_counters_from_userFlorian Westphal
2016-08-21netfilter: x_tables: do compat validation via translate_tableFlorian Westphal
2016-08-21netfilter: x_tables: xt_compat_match_from_user doesn't need a retvalFlorian Westphal
2016-08-21netfilter: x_tables: don't reject valid target size on some architecturesFlorian Westphal
2016-08-21netfilter: x_tables: validate all offsets and sizes in a ruleFlorian Westphal
2016-08-21netfilter: x_tables: check for bogus target offsetFlorian Westphal
2016-08-21netfilter: x_tables: check standard target size tooFlorian Westphal
2016-08-21netfilter: x_tables: add compat version of xt_check_entry_offsetsFlorian Westphal
2016-08-21netfilter: x_tables: assert minimum target sizeFlorian Westphal
2016-08-21netfilter: x_tables: add and use xt_check_entry_offsetsFlorian Westphal
2016-06-07ipvs: correct initial offset of Call-ID header search in SIP persistence engineMarco Angaroni
2016-03-03netfilter: nf_conntrack: fix RCU race in nf_conntrack_find_getAndrey Vagin
2015-10-22ipvs: fix crash with sync protocol v0 and FTPJulian Anastasov
2015-10-22ipvs: do not use random local source address for tunnelsJulian Anastasov
2015-10-22netfilter: nf_conntrack: Support expectations in different zonesJoe Stringer
2015-07-03netfilter: Zero the tuple in nfnl_cthelper_parse_tuple()Ian Wilson
2015-07-03netfilter: nfnetlink_cthelper: Remove 'const' and '&' to avoid warningsChen Gang
2015-04-29netfilter: conntrack: disable generic tracking for known protocolsFlorian Westphal
2015-04-19core, nfqueue, openvswitch: fix compilation warningJiri Slaby
2015-03-26ipvs: rerouting to local clients is not needed anymoreJulian Anastasov
2015-03-26ipvs: add missing ip_vs_pe_put in sync codeJulian Anastasov
2015-01-29ipvs: uninitialized data with IP_VS_IPV6Dan Carpenter
2015-01-27netfilter: ipset: small potential read beyond the end of bufferDan Carpenter
2014-11-21netfilter: nf_nat: fix oops on netns removalFlorian Westphal
2014-11-21netfilter: nf_log: release skbuff on nlmsg put failureHoucheng Lin
2014-11-21netfilter: nfnetlink_log: fix maximum packet length logged to userspaceFlorian Westphal
2014-11-21netfilter: nf_log: account for size of NLMSG_DONE attributeFlorian Westphal
2014-10-05netfilter: nf_conntrack: avoid large timeout for mid-stream pickupFlorian Westphal
2014-10-05ipvs: fix ipv6 hook registration for local repliesJulian Anastasov
2014-10-05ipvs: Maintain all DSCP and ECN bits for ipv6 tun forwardingAlex Gartrell
2014-10-05ipvs: avoid netns exit crash on ip_vs_conn_drop_conntrackJulian Anastasov
2014-08-14inetpeer: get rid of ip_id_countEric Dumazet
2014-07-31core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errorsZoltan Kiss
2014-07-06ipvs: Fix panic due to non-linear skbPeter Christensen
2014-06-26net: Use netlink_ns_capable to verify the permisions of netlink messagesEric W. Biederman
2014-04-03netfilter: nf_conntrack_dccp: fix skb_header_pointer API usagesDaniel Borkmann
2014-01-15netfilter: nf_nat: fix access to uninitialized buffer in IRC NAT helperDaniel Borkmann
2013-12-08netfilter: push reasm skb through instead of original frag skbsJiri Pirko
2013-11-04netfilter: nf_conntrack: fix rt6i_gateway checks for H.323 helperJulian Anastasov
2013-10-13ip: generate unique IP identificator if local fragmentation is allowedAnsis Atteka
2013-10-01netfilter: ipset: Fix serious failure in CIDR trackingOliver Smith
2013-06-24netfilter: ctnetlink: send event when conntrack label was modifiedFlorian Westphal
2013-06-24netfilter: nf_nat_sip: fix manglingBalazs Peter Odor
2013-06-19ipvs: SCTP ports should be writable in ICMP packetsJulian Anastasov