summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
2015-01-27netfilter: ipset: small potential read beyond the end of bufferDan Carpenter
2014-11-21netfilter: nf_nat: fix oops on netns removalFlorian Westphal
2014-11-21netfilter: nf_log: release skbuff on nlmsg put failureHoucheng Lin
2014-11-21netfilter: nfnetlink_log: fix maximum packet length logged to userspaceFlorian Westphal
2014-11-21netfilter: nf_log: account for size of NLMSG_DONE attributeFlorian Westphal
2014-10-05netfilter: nf_conntrack: avoid large timeout for mid-stream pickupFlorian Westphal
2014-10-05ipvs: fix ipv6 hook registration for local repliesJulian Anastasov
2014-10-05ipvs: Maintain all DSCP and ECN bits for ipv6 tun forwardingAlex Gartrell
2014-10-05ipvs: avoid netns exit crash on ip_vs_conn_drop_conntrackJulian Anastasov
2014-08-14inetpeer: get rid of ip_id_countEric Dumazet
2014-07-31core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errorsZoltan Kiss
2014-07-06ipvs: Fix panic due to non-linear skbPeter Christensen
2014-06-26net: Use netlink_ns_capable to verify the permisions of netlink messagesEric W. Biederman
2014-04-03netfilter: nf_conntrack_dccp: fix skb_header_pointer API usagesDaniel Borkmann
2014-01-15netfilter: nf_nat: fix access to uninitialized buffer in IRC NAT helperDaniel Borkmann
2013-12-08netfilter: push reasm skb through instead of original frag skbsJiri Pirko
2013-11-04netfilter: nf_conntrack: fix rt6i_gateway checks for H.323 helperJulian Anastasov
2013-10-13ip: generate unique IP identificator if local fragmentation is allowedAnsis Atteka
2013-10-01netfilter: ipset: Fix serious failure in CIDR trackingOliver Smith
2013-06-24netfilter: ctnetlink: send event when conntrack label was modifiedFlorian Westphal
2013-06-24netfilter: nf_nat_sip: fix manglingBalazs Peter Odor
2013-06-19ipvs: SCTP ports should be writable in ICMP packetsJulian Anastasov
2013-06-12netfilter: xt_TCPMSS: Fix missing fragmentation handlingPhil Oester
2013-06-12netfilter: xt_TCPMSS: Fix IPv6 default MSS tooPhil Oester
2013-06-11netfilter: xt_TCPOPTSTRIP: don't use tcp_hdr()Pablo Neira Ayuso
2013-06-10ipvs: info leak in __ip_vs_get_dest_entries()Dan Carpenter
2013-06-07netfilter: nfnetlink_queue: fix missing HW protocolPablo Neira Ayuso
2013-06-05netfilter: xt_TCPMSS: Fix violation of RFC879 in absence of MSS optionPhil Oester
2013-06-05netfilter: nfnetlink_cttimeout: fix incomplete dumping of objectsPablo Neira Ayuso
2013-06-05netfilter: nfnetlink_acct: fix incomplete dumping of objectsPablo Neira Ayuso
2013-05-29ipvs: ip_vs_sh: fix buildJan Beulich
2013-05-29netfilter: xt_LOG: fix mark logging for IPv6 packetsMichal Kubeček
2013-05-27ipvs: Fix reuse connection if real server is deadGrzegorz Lyczba
2013-05-23netfilter: add nf_ipv6_ops hook to fix xt_addrtype with IPv6Florian Westphal
2013-05-16netfilter: xt_TCPOPTSTRIP: fix possible mangling beyond packet boundaryPablo Neira Ayuso
2013-05-15netfilter: log: netns NULL ptr bug when calling from conntrackHans Schillstrom
2013-05-06netfilter: nf_{log,queue}: fix compilation without CONFIG_PROC_FSPablo Neira Ayuso
2013-05-01Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/vir...Linus Torvalds
2013-05-01proc: Supply PDE attribute setting accessor functionsDavid Howells
2013-05-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds
2013-04-30Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller
2013-04-29net/netfilter: rename random32() to prandom_u32()Akinobu Mita
2013-04-29xt_hashlimit: allocate a copy of name explicitly, don't rely on procfs gutsAl Viro
2013-04-29sctp: Correct type and usage of sctp_end_cksum()Simon Horman
2013-04-29netfilter: nfnetlink_queue: avoid expensive gso segmentation and checksum fixupFlorian Westphal
2013-04-29netfilter: nfnetlink_queue: add skb info attributeFlorian Westphal
2013-04-29netfilter: move skb_gso_segment into nfnetlink_queue moduleFlorian Westphal
2013-04-29netfilter: nf_queue: move device refcount bump to extra functionFlorian Westphal
2013-04-29netfilter: ipset: set match: add support to match the countersJozsef Kadlecsik
2013-04-29netfilter: ipset: The list:set type with counter supportJozsef Kadlecsik