summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
2024-12-05netfilter: ipset: add missing range check in bitmap_ip_uadtJeongjun Park
2024-11-08netfilter: nft_payload: sanitize offset and length before calling skb_checksum()Pablo Neira Ayuso
2024-11-08netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_E...Simon Horman
2024-11-08netfilter: nf_tables: elements with timeout below CONFIG_HZ never expirePablo Neira Ayuso
2024-09-12netfilter: nf_conncount: fix wrong variable typeYunjian Wang
2024-09-04netfilter: nft_counter: Synchronize nft_counter_reset() against reader.Sebastian Andrzej Siewior
2024-08-19netfilter: nf_tables: prefer nft_chain_validateFlorian Westphal
2024-08-19netfilter: nf_tables: use timestamp to check for set element timeoutPablo Neira Ayuso
2024-08-19netfilter: nf_tables: set element extended ACK reporting supportPablo Neira Ayuso
2024-08-19netfilter: ctnetlink: use helper function to calculate expect IDPablo Neira Ayuso
2024-08-19ipvs: Avoid unnecessary calls to skb_is_gso_sctpIsmael Luceno
2024-07-05netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registersPablo Neira Ayuso
2024-07-05netfilter: nf_tables: validate family when identifying table via handlePablo Neira Ayuso
2024-06-16netfilter: nf_tables: discard table flag update with pending basechain deletionPablo Neira Ayuso
2024-06-16netfilter: nf_tables: reject new basechain after table flag updatePablo Neira Ayuso
2024-06-16netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeoutPablo Neira Ayuso
2024-06-16netfilter: nf_tables: do not compare internal table flags on updatesPablo Neira Ayuso
2024-06-16netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()Ignat Korchagin
2024-06-16netfilter: nf_tables: set dormant flag on hook register failureFlorian Westphal
2024-06-16netfilter: nft_set_rbtree: skip end interval element from gcPablo Neira Ayuso
2024-06-16netfilter: nf_tables: validate NFPROTO_* familyPablo Neira Ayuso
2024-06-16netfilter: nf_tables: skip dead set elements in netlink dumpPablo Neira Ayuso
2024-06-16netfilter: nf_tables: mark newset as dead on transaction abortFlorian Westphal
2024-06-16netfilter: nft_dynset: relax superfluous check on set updatesPablo Neira Ayuso
2024-06-16netfilter: nft_dynset: report EOPNOTSUPP on missing set featurePablo Neira Ayuso
2024-06-16netfilter: nftables: exthdr: fix 4-byte stack OOB writeFlorian Westphal
2024-06-16netfilter: nft_dynset: fix timeouts later than 23 daysPablo Neira Ayuso
2024-06-16netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush (for 4.19)Pablo Neira Ayuso
2024-06-16netfilter: nf_tables: disable toggling dormant table state more than oncePablo Neira Ayuso
2024-06-16netfilter: nf_tables: fix table flag updatesPablo Neira Ayuso
2024-06-16netfilter: nftables: update table flags from the commit phasePablo Neira Ayuso
2024-06-16netfilter: nf_tables: double hook unregistration in netns pathPablo Neira Ayuso
2024-06-16netfilter: nf_tables: unregister flowtable hooks on netns exitPablo Neira Ayuso
2024-06-16netfilter: nf_tables: fix memleak when more than 255 elements expiredPablo Neira Ayuso
2024-06-16netfilter: nft_set_hash: try later when GC hits EAGAIN on iterationPablo Neira Ayuso
2024-06-16netfilter: nft_set_rbtree: use read spinlock to avoid datapath contentionPablo Neira Ayuso
2024-06-16netfilter: nft_set_rbtree: skip sync GC for new elements in this transactionPablo Neira Ayuso
2024-06-16netfilter: nf_tables: defer gc run if previous batch is still pendingFlorian Westphal
2024-06-16netfilter: nf_tables: GC transaction race with abort pathPablo Neira Ayuso
2024-06-16netfilter: nf_tables: GC transaction race with netns dismantlePablo Neira Ayuso
2024-06-16netfilter: nf_tables: fix GC transaction races with netns and netlink event e...Pablo Neira Ayuso
2024-06-16netfilter: nf_tables: remove busy mark and gc batch APIPablo Neira Ayuso
2024-06-16netfilter: nf_tables: adapt set backend to use GC transaction APIPablo Neira Ayuso
2024-06-16netfilter: nf_tables: GC transaction API to avoid race with control planePablo Neira Ayuso
2024-06-16netfilter: nf_tables: don't skip expired elements during walkPablo Neira Ayuso
2024-06-16netfilter: nft_set_rbtree: fix overlap expiration walkPablo Neira Ayuso
2024-06-16netfilter: nft_set_rbtree: fix null deref on element insertionPablo Neira Ayuso
2024-06-16netfilter: nft_set_rbtree: Switch to node list walk for overlap detectionPablo Neira Ayuso
2024-06-16netfilter: nft_set_rbtree: Add missing expired checksPhil Sutter
2024-06-16netfilter: nft_set_rbtree: allow loose matching of closing element in intervalPablo Neira Ayuso