summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
2022-09-28netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()Tetsuo Handa
2022-09-28netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()Tetsuo Handa
2022-09-28netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()Pablo Neira Ayuso
2022-09-28netfilter: nf_conntrack_irc: Tighten matching on DCC messageDavid Leadbeater
2022-09-28netfilter: nf_conntrack_sip: fix ct_sip_walk_headersIgor Ryzhov
2022-09-15netfilter: nf_conntrack_irc: Fix forged IP logicDavid Leadbeater
2022-09-15netfilter: nf_tables: clean up hook list when offload flags check failsPablo Neira Ayuso
2022-09-05netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to yGeert Uytterhoeven
2022-08-31net: Fix data-races around sysctl_[rw]mem_(max|default).Kuniyuki Iwashima
2022-08-31netfilter: nf_tables: disallow binding to already bound chainPablo Neira Ayuso
2022-08-31netfilter: nf_tables: disallow jump to implicit chain from set elementPablo Neira Ayuso
2022-08-31netfilter: nf_tables: upfront validation of data via nft_data_init()Pablo Neira Ayuso
2022-08-31netfilter: bitwise: improve error goto labelsJeremy Sowden
2022-08-31netfilter: nft_cmp: optimize comparison for 16-bytesPablo Neira Ayuso
2022-08-31netfilter: nf_tables: consolidate rule verdict trace callPablo Neira Ayuso
2022-08-31netfilter: nftables: remove redundant assignment of variable errColin Ian King
2022-08-31netfilter: nft_tunnel: restrict it to netdev familyPablo Neira Ayuso
2022-08-31netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet familiesPablo Neira Ayuso
2022-08-31netfilter: nf_tables: do not leave chain stats enabled on errorPablo Neira Ayuso
2022-08-31netfilter: nft_payload: do not truncate csum_offset and csum_typePablo Neira Ayuso
2022-08-31netfilter: nft_payload: report ERANGE for too long offset and lengthPablo Neira Ayuso
2022-08-25netfilter: nf_tables: fix audit memory leak in nf_tables_commitDongliang Mu
2022-08-25netfilter: nftables: fix a warning message in nf_tables_commit_audit_collect()Dan Carpenter
2022-08-25netfilter: add helper function to set up the nfnetlink header and use itPablo Neira Ayuso
2022-08-25netfilter: nftables: add helper function to set the base sequence numberPablo Neira Ayuso
2022-08-25audit: log nftables configuration change events once per tableRichard Guy Briggs
2022-08-25netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specifiedPablo Neira Ayuso
2022-08-25netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flagPablo Neira Ayuso
2022-08-25netfilter: nf_tables: really skip inactive sets when allocating namePablo Neira Ayuso
2022-08-21netfilter: nf_tables: fix null deref due to zeroed list headFlorian Westphal
2022-08-21netfilter: nf_tables: do not allow RULE_ID to refer to another chainThadeu Lima de Souza Cascardo
2022-08-21netfilter: nf_tables: do not allow CHAIN_ID to refer to another tableThadeu Lima de Souza Cascardo
2022-08-21netfilter: nf_tables: do not allow SET_ID to refer to another tableThadeu Lima de Souza Cascardo
2022-08-03netfilter: nf_queue: do not allow packet truncation below transport header of...Florian Westphal
2022-07-12netfilter: nf_tables: stricter validation of element dataPablo Neira Ayuso
2022-07-12netfilter: nft_set_pipapo: release elements in clone from abort pathPablo Neira Ayuso
2022-07-07netfilter: nft_dynset: restore set element counter when failing to updatePablo Neira Ayuso
2022-06-29netfilter: use get_random_u32 instead of prandomFlorian Westphal
2022-06-29netfilter: nftables: add nft_parse_register_store() and use itPablo Neira Ayuso
2022-06-29netfilter: nftables: add nft_parse_register_load() and use itPablo Neira Ayuso
2022-06-14netfilter: nf_tables: bail out early if hardware offload is not supportedPablo Neira Ayuso
2022-06-14netfilter: nf_tables: memleak flow rule from commit pathPablo Neira Ayuso
2022-06-14netfilter: nf_tables: release new hooks on unsupported flowtable flagsPablo Neira Ayuso
2022-06-14netfilter: nf_tables: always initialize flowtable hook list in transactionPablo Neira Ayuso
2022-06-14netfilter: nf_tables: delete flowtable hooks via transaction listPablo Neira Ayuso
2022-06-14netfilter: nat: really support inet nat without l3 addressFlorian Westphal
2022-06-09lsm,selinux: pass flowi_common instead of flowi to the LSM hooksPaul Moore
2022-06-06netfilter: nf_tables: sanitize nft_set_desc_concat_parse()Pablo Neira Ayuso
2022-06-06netfilter: nf_tables: disallow non-stateful expression in sets earlierPablo Neira Ayuso
2022-05-09netfilter: nft_socket: only do sk lookups when indev is availableFlorian Westphal
generated by cgit v1.2.3 (git 2.39.1) at 2026-09-19 08:42:56 +0000