summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
2016-08-21netfilter: x_tables: introduce and use xt_copy_counters_from_userFlorian Westphal
2016-08-21netfilter: x_tables: do compat validation via translate_tableFlorian Westphal
2016-08-21netfilter: x_tables: xt_compat_match_from_user doesn't need a retvalFlorian Westphal
2016-08-21netfilter: x_tables: don't reject valid target size on some architecturesFlorian Westphal
2016-08-21netfilter: x_tables: validate all offsets and sizes in a ruleFlorian Westphal
2016-08-21netfilter: x_tables: check for bogus target offsetFlorian Westphal
2016-08-21netfilter: x_tables: check standard target size tooFlorian Westphal
2016-08-21netfilter: x_tables: add compat version of xt_check_entry_offsetsFlorian Westphal
2016-08-21netfilter: x_tables: assert minimum target sizeFlorian Westphal
2016-08-21netfilter: x_tables: add and use xt_check_entry_offsetsFlorian Westphal
2016-06-07ipvs: correct initial offset of Call-ID header search in SIP persistence engineMarco Angaroni
2016-03-03netfilter: nf_conntrack: fix RCU race in nf_conntrack_find_getAndrey Vagin
2015-10-22ipvs: fix crash with sync protocol v0 and FTPJulian Anastasov
2015-10-22ipvs: do not use random local source address for tunnelsJulian Anastasov
2015-10-22netfilter: nf_conntrack: Support expectations in different zonesJoe Stringer
2015-07-03netfilter: Zero the tuple in nfnl_cthelper_parse_tuple()Ian Wilson
2015-07-03netfilter: nfnetlink_cthelper: Remove 'const' and '&' to avoid warningsChen Gang
2015-04-29netfilter: conntrack: disable generic tracking for known protocolsFlorian Westphal
2015-04-19core, nfqueue, openvswitch: fix compilation warningJiri Slaby
2015-03-26ipvs: rerouting to local clients is not needed anymoreJulian Anastasov
2015-03-26ipvs: add missing ip_vs_pe_put in sync codeJulian Anastasov
2015-01-29ipvs: uninitialized data with IP_VS_IPV6Dan Carpenter
2015-01-27netfilter: ipset: small potential read beyond the end of bufferDan Carpenter
2014-11-21netfilter: nf_nat: fix oops on netns removalFlorian Westphal
2014-11-21netfilter: nf_log: release skbuff on nlmsg put failureHoucheng Lin
2014-11-21netfilter: nfnetlink_log: fix maximum packet length logged to userspaceFlorian Westphal
2014-11-21netfilter: nf_log: account for size of NLMSG_DONE attributeFlorian Westphal
2014-10-05netfilter: nf_conntrack: avoid large timeout for mid-stream pickupFlorian Westphal
2014-10-05ipvs: fix ipv6 hook registration for local repliesJulian Anastasov
2014-10-05ipvs: Maintain all DSCP and ECN bits for ipv6 tun forwardingAlex Gartrell
2014-10-05ipvs: avoid netns exit crash on ip_vs_conn_drop_conntrackJulian Anastasov
2014-08-14inetpeer: get rid of ip_id_countEric Dumazet
2014-07-31core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errorsZoltan Kiss
2014-07-06ipvs: Fix panic due to non-linear skbPeter Christensen
2014-06-26net: Use netlink_ns_capable to verify the permisions of netlink messagesEric W. Biederman
2014-04-03netfilter: nf_conntrack_dccp: fix skb_header_pointer API usagesDaniel Borkmann
2014-01-15netfilter: nf_nat: fix access to uninitialized buffer in IRC NAT helperDaniel Borkmann
2013-12-08netfilter: push reasm skb through instead of original frag skbsJiri Pirko
2013-11-04netfilter: nf_conntrack: fix rt6i_gateway checks for H.323 helperJulian Anastasov
2013-10-13ip: generate unique IP identificator if local fragmentation is allowedAnsis Atteka
2013-10-01netfilter: ipset: Fix serious failure in CIDR trackingOliver Smith
2013-06-24netfilter: ctnetlink: send event when conntrack label was modifiedFlorian Westphal
2013-06-24netfilter: nf_nat_sip: fix manglingBalazs Peter Odor
2013-06-19ipvs: SCTP ports should be writable in ICMP packetsJulian Anastasov
2013-06-12netfilter: xt_TCPMSS: Fix missing fragmentation handlingPhil Oester
2013-06-12netfilter: xt_TCPMSS: Fix IPv6 default MSS tooPhil Oester
2013-06-11netfilter: xt_TCPOPTSTRIP: don't use tcp_hdr()Pablo Neira Ayuso
2013-06-10ipvs: info leak in __ip_vs_get_dest_entries()Dan Carpenter
2013-06-07netfilter: nfnetlink_queue: fix missing HW protocolPablo Neira Ayuso
2013-06-05netfilter: xt_TCPMSS: Fix violation of RFC879 in absence of MSS optionPhil Oester