summaryrefslogtreecommitdiff
path: root/net/netfilter
AgeCommit message (Expand)Author
2019-11-24netfilter: nft_compat: do not dump private areaPablo Neira Ayuso
2019-11-12ipvs: move old_secure_tcp into struct netns_ipvsEric Dumazet
2019-11-12ipvs: don't ignore errors in case refcounting ip_vs module failsDavide Caratti
2019-11-12netfilter: ipset: Fix an error code in ip_set_sockfn_get()Dan Carpenter
2019-10-11netfilter: nf_tables: allow lookups in dynamic setsFlorian Westphal
2019-09-21netfilter: nf_conntrack_ftp: Fix debug outputThomas Jarosch
2019-09-21netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_infoJuliana Rodrigueiro
2019-08-29netfilter: ipset: Fix rename concurrency with listingJozsef Kadlecsik
2019-08-25netfilter: conntrack: Use consistent ct id hash calculationDirk Morris
2019-08-16netfilter: nft_hash: fix symhash with modulus oneLaura Garcia Liebana
2019-08-16netfilter: nfnetlink: avoid deadlock due to synchronous request_moduleFlorian Westphal
2019-07-31net: make skb_dst_force return true when dst is refcountedFlorian Westphal
2019-07-31ipvs: fix tinfo memory leak in start_sync_threadJulian Anastasov
2019-07-31ipvs: defer hook registration to avoid leaksJulian Anastasov
2019-07-31ipset: Fix memory accounting for hash types on resizeStefano Brivio
2019-06-22ipvs: Fix use-after-free in ip_vs_inYueHaibing
2019-06-22netfilter: nf_queue: fix reinject verdict handlingJagdish Motwani
2019-05-16netfilter: nf_tables: warn when expr implements only one of activate/deactivateFlorian Westphal
2019-05-16netfilter: ctnetlink: don't use conntrack/expect object addresses as idFlorian Westphal
2019-05-16ipvs: do not schedule icmp errors from tunnelsJulian Anastasov
2019-05-16netfilter: compat: initialize all fields in xt_initFrancesco Ruggeri
2019-05-04netfilter: nft_set_rbtree: check for inactive element after flag mismatchPablo Neira Ayuso
2019-05-02ipvs: fix warning on unused variableAndrea Claudi
2019-04-20netfilter: xt_cgroup: shrink size of v2 pathPablo Neira Ayuso
2019-04-05netfilter: physdev: relax br_netfilter dependencyFlorian Westphal
2019-04-05netfilter: conntrack: fix cloned unconfirmed skb->_nfct race in __nf_conntrac...Chieh-Min Wang
2019-03-23ipvs: fix dependency on nf_defrag_ipv6Andrea Claudi
2019-03-13netfilter: nf_nat: skip nat clash resolution for same-origin entriesMartynas Pumputis
2019-03-13ipvs: Fix signed integer overflow when setsockopt timeoutZhangXiaoxu
2019-02-27netfilter: nft_compat: use-after-free when deleting targetsPablo Neira Ayuso
2019-02-27netfilter: nf_tables: fix flush after rule deletion in the same batchPablo Neira Ayuso
2019-02-27netfilter: nf_tables: fix leaking object reference countTaehee Yoo
2019-01-13netfilter: nat: can't use dst_hold on noref dstFlorian Westphal
2019-01-13netfilter: ipset: do not call ipset_nest_end after nla_nest_cancelPan Bian
2019-01-13netfilter: seqadj: re-load tcp header pointer after possible head reallocationFlorian Westphal
2019-01-09netfilter: nf_conncount: don't skip eviction when age is negativeFlorian Westphal
2019-01-09netfilter: nf_conncount: fix garbage collection confirm raceFlorian Westphal
2019-01-09netfilter: nf_conncount: Fix garbage collection with zonesYi-Hung Wei
2019-01-09netfilter: nf_conncount: expose connection list interfacePablo Neira Ayuso
2019-01-09netfilter: xt_connlimit: don't store address in the conn nodesFlorian Westphal
2018-12-21netfilter: ipset: Fix wraparound in hash:*net* typesJozsef Kadlecsik
2018-12-17netfilter: nf_tables: deactivate expressions in rule replecement routineTaehee Yoo
2018-12-17ipvs: call ip_vs_dst_notifier earlier than ipv6_dev_notfXin Long
2018-12-17netfilter: xt_hashlimit: fix a possible memory leak in htable_create()Taehee Yoo
2018-12-17netfilter: nf_tables: fix use-after-free when deleting compat expressionsFlorian Westphal
2018-11-27netfilter: xt_IDLETIMER: add sysfs filename checking routineTaehee Yoo
2018-11-27netfilter: ipset: actually allow allowable CIDR 0 in hash:net,port,netEric Westbrook
2018-11-27netfilter: ipset: list:set: Decrease refcount synchronously on deletion and r...Stefano Brivio
2018-11-21netfilter: conntrack: fix calculation of next bucket number in early_dropVasily Khoruzhick
2018-10-10netfilter: nf_tables: release chain in flushing setTaehee Yoo