summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
2016-06-24netfilter: x_tables: introduce and use xt_copy_counters_from_userFlorian Westphal
2016-06-24netfilter: x_tables: do compat validation via translate_tableFlorian Westphal
2016-06-24netfilter: x_tables: xt_compat_match_from_user doesn't need a retvalFlorian Westphal
2016-06-24netfilter: x_tables: don't reject valid target size on some architecturesFlorian Westphal
2016-06-24netfilter: x_tables: validate all offsets and sizes in a ruleFlorian Westphal
2016-06-24netfilter: x_tables: check for bogus target offsetFlorian Westphal
2016-06-24netfilter: x_tables: check standard target size tooFlorian Westphal
2016-06-24netfilter: x_tables: add compat version of xt_check_entry_offsetsFlorian Westphal
2016-06-24netfilter: x_tables: assert minimum target sizeFlorian Westphal
2016-06-24netfilter: x_tables: add and use xt_check_entry_offsetsFlorian Westphal
2016-05-14nf_conntrack: avoid kernel pointer value leak in slab nameLinus Torvalds
2016-05-05netfilter: nfnetlink_acct: validate NFACCT_QUOTA parameterPhil Turnbull
2016-04-29netfilter: IDLETIMER: fix race condition when destroy the targetLiping Zhang
2016-04-29netfilter: conntrack: init all_locks to avoid debug warningFlorian Westphal
2016-04-07netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP optionsJozsef Kadlecsik
2016-03-28netfilter: nfnetlink_queue: honor NFQA_CFG_F_FAIL_OPEN when netlink unicast f...Pablo Neira Ayuso
2016-03-28netfilter: ipset: fix race condition in ipset save, swap and deleteVishwanath Pai
2016-03-15netfilter: nf_conntrack: consolidate lock/unlock into unlock_waitNicholas Mc Guire
2016-03-12netfilter: x_tables: check for size overflowFlorian Westphal
2016-03-11netfilter: nft_compat: check match/targetinfo attr sizeFlorian Westphal
2016-03-11Merge tag 'ipvs-fixes-for-v4.5' of https://git.kernel.org/pub/scm/linux/kerne...Pablo Neira Ayuso
2016-03-10Merge branch 'master' of git://blackhole.kfki.hu/nfPablo Neira Ayuso
2016-03-08netfilter: ipset: Check IPSET_ATTR_ETHER netlink attribute lengthJozsef Kadlecsik
2016-03-08Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller
2016-03-07ipvs: correct initial offset of Call-ID header search in SIP persistence engineMarco Angaroni
2016-03-07ipvs: allow rescheduling after RSTJulian Anastasov
2016-03-07ipvs: drop first packet to redirect conntrackJulian Anastasov
2016-03-07ipvs: handle ip_vs_fill_iph_skb_off failureArnd Bergmann
2016-03-02netfilter: nft_masq: support port rangePablo Neira Ayuso
2016-03-02netfilter: xtables: don't hook tables by defaultFlorian Westphal
2016-03-02Merge tag 'ipvs-for-v4.6' of https://git.kernel.org/pub/scm/linux/kernel/git/...Pablo Neira Ayuso
2016-03-01net: remove skb_sender_cpu_clear()WANG Cong
2016-02-29netfilter: xt_osf: remove unused variableSudip Mukherjee
2016-02-29netfilter: meta: add PRANDOM supportFlorian Westphal
2016-02-29netfilter: nfnetlink_acct: validate NFACCT_FILTER parametersPhil Turnbull
2016-02-24netfilter: ipset: Fix set:list type crash when flush/dump set in parallelJozsef Kadlecsik
2016-02-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller
2016-02-18nfnetlink: Revert "nfnetlink: add support for memory mapped netlink"Florian Westphal
2016-02-18nfnetlink: remove nfnetlink_alloc_skbFlorian Westphal
2016-02-18netfilter: ipvs: avoid unused variable warningsArnd Bergmann
2016-02-18netfilter: ipvs: Remove noisy debug print from ip_vs_del_serviceYannick Brosseau
2016-02-12net: ip_tunnel: remove 'csum_help' argument to iptunnel_handle_offloadsEdward Cree
2016-02-11inet: refactor inet[6]_lookup functions to take skbCraig Gallek
2016-02-08netfilter: nft_counter: fix erroneous return valuesAnton Protopopov
2016-02-08netfilter: tee: select NF_DUP_IPV6 unconditionallyArnd Bergmann
2016-02-08netfilter: nfnetlink: correctly validate length of batch messagesPhil Turnbull
2016-02-01netfilter: cttimeout: fix deadlock due to erroneous unlock/lock conversionFlorian Westphal
2016-02-01netfilter: nfnetlink: use original skbuff when acking batchesPablo Neira Ayuso
2016-02-01netfilter: conntrack: resched in nf_ct_iterate_cleanupFlorian Westphal
2016-01-20netfilter: nf_conntrack: use safer way to lock all bucketsSasha Levin