summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
2019-07-28net: make skb_dst_force return true when dst is refcountedFlorian Westphal
2019-07-26netfilter: Fix remainder of pseudo-header protocol 0He Zhe
2019-07-26netfilter: ctnetlink: Fix regression in conntrack entry deletionFelix Kaechele
2019-07-26ipvs: fix tinfo memory leak in start_sync_threadJulian Anastasov
2019-07-26ipvs: defer hook registration to avoid leaksJulian Anastasov
2019-07-26ipset: Fix memory accounting for hash types on resizeStefano Brivio
2019-07-10netfilter: nft_flow_offload: IPCB is only valid for ipv4 familyFlorian Westphal
2019-07-10netfilter: nft_flow_offload: don't offload when sequence numbers need adjustmentFlorian Westphal
2019-07-10netfilter: nft_flow_offload: set liberal tracking mode for tcpFlorian Westphal
2019-07-10netfilter: nf_flow_table: ignore DF bit settingFlorian Westphal
2019-06-22ipvs: Fix use-after-free in ip_vs_inYueHaibing
2019-06-22netfilter: nft_fib: Fix existence check supportPhil Sutter
2019-06-22netfilter: nf_queue: fix reinject verdict handlingJagdish Motwani
2019-06-22netfilter: nf_tables: fix oops during rule dumpFlorian Westphal
2019-06-22netfilter: nat: fix udp checksum corruptionFlorian Westphal
2019-06-15netfilter: nf_flow_table: fix netdev refcnt leakTaehee Yoo
2019-06-15netfilter: nf_flow_table: check ttl value in flow offload data pathTaehee Yoo
2019-06-15netfilter: nf_tables: fix base chain stat rcu_dereference usageFlorian Westphal
2019-06-15netfilter: nf_conntrack_h323: restore boundary check correctnessJakub Jankowski
2019-06-15netfilter: nf_flow_table: fix missing error check for rhashtable_insert_fastTaehee Yoo
2019-05-31netfilter: ctnetlink: Resolve conntrack L3-protocol flush regressionKristian Evensen
2019-04-22netfilter: fix nf_l4proto_log_invalid to log invalid packetsAndrei Vagin
2019-04-22netfilter: never get/set skb->tstampFlorian Westphal
2019-04-15netfilter: nat: fix icmp id randomizationFlorian Westphal
2019-04-15netfilter: nf_tables: prevent shift wrap in nft_chain_parse_hook()Dan Carpenter
2019-04-15netfilter: ctnetlink: don't use conntrack/expect object addresses as idFlorian Westphal
2019-04-13ipvs: do not schedule icmp errors from tunnelsJulian Anastasov
2019-04-13netfilter: conntrack: initialize ct->timeoutAlexander Potapenko
2019-04-13netfilter: conntrack: don't set related state for different outer addressFlorian Westphal
2019-03-20netfilter: nf_tables: add missing ->release_ops() in error path of newrule()Taehee Yoo
2019-03-18netfilter: nft_redir: fix module autoload with ip4Pablo Neira Ayuso
2019-03-18netfilter: nf_tables: bogus EBUSY in helper removal from transactionPablo Neira Ayuso
2019-03-18netfilter: fix NETFILTER_XT_TARGET_TEE dependenciesArnd Bergmann
2019-03-18netfilter: nft_set_rbtree: check for inactive element after flag mismatchPablo Neira Ayuso
2019-03-18netfilter: nf_conntrack_sip: remove direct dependency on IPv6Alin Nastac
2019-03-11netfilter: nf_tables: return immediately on empty commitFlorian Westphal
2019-03-11netfilter: nf_tables: use-after-free in dynamic operationsPablo Neira Ayuso
2019-03-11netfilter: nf_tables: bogus EBUSY when deleting set after flushPablo Neira Ayuso
2019-03-08netfilter: nf_tables: fix set double-free in abort pathPablo Neira Ayuso
2019-03-08netfilter: nat: don't register device notifier twiceFlorian Westphal
2019-03-01netfilter: nf_tables: merge ipv4 and ipv6 nat chain typesFlorian Westphal
2019-03-01netfilter: nf_tables: nat: merge nft_masq protocol specific modulesFlorian Westphal
2019-03-01netfilter: nf_tables: nat: merge nft_redir protocol specific modulesFlorian Westphal
2019-03-01netfilter: xt_IDLETIMER: fix sysfs callback function typeSami Tolvanen
2019-03-01netfilter: nf_conntrack: ensure that CONNTRACK_LOCKS is power of 2Li RongQing
2019-03-01netfilter: nf_tables: check the result of dereferencing base_chain->statsLi RongQing
2019-03-01ipvs: get sctphdr by sctphoff in sctp_csum_checkXin Long
2019-03-01netfilter: convert the proto argument from u8 to u16Li RongQing
2019-03-01netfilter: nft_tunnel: Add dst_cache supportwenxu
2019-03-01netfilter: conntrack: tcp: only close if RST matches exact sequenceFlorian Westphal