summaryrefslogtreecommitdiffstats
path: root/net/netfilter (follow)
Commit message (Expand)AuthorAgeFilesLines
* netfilter: nf_tables: prefer nft_chain_validateFlorian Westphal2024-07-111-145/+13
* netfilter: nfnetlink_queue: drop bogus WARN_ONFlorian Westphal2024-07-111-1/+1
* netfilter: nf_tables: unconditionally flush pending work before notifierFlorian Westphal2024-07-041-2/+1
* netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registersPablo Neira Ayuso2024-06-272-5/+6
* netfilter: fix undefined reference to 'netfilter_lwtunnel_*' when CONFIG_SYSC...Jianguo Wu2024-06-241-0/+3
* netfilter: move the sysctl nf_hooks_lwtunnel into the netfilter coreJianguo Wu2024-06-194-17/+84
* netfilter: ipset: Fix suspicious rcu_dereference_protected()Jozsef Kadlecsik2024-06-191-5/+6
* netfilter: ipset: Fix race between namespace cleanup and gc in the list:set typeJozsef Kadlecsik2024-06-112-51/+60
* netfilter: nft_inner: validate mandatory meta and payloadDavide Ornaghi2024-06-112-0/+7
* netfilter: nft_fib: allow from forward/input without iif selectorEric Garver2024-05-291-5/+3
* netfilter: nft_payload: skbuff vlan metadata mangle supportPablo Neira Ayuso2024-05-291-7/+65
* netfilter: nft_payload: restore vlan q-in-q match supportPablo Neira Ayuso2024-05-201-16/+7
* netfilter: ipset: Add list flush to cancel_gcAlexander Maltsev2024-05-201-0/+3
* netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()Eric Dumazet2024-05-201-0/+2
* Merge tag 'nf-next-24-05-12' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski2024-05-1313-169/+157
|\
| * netfilter: nf_tables: allow clone callbacks to sleepFlorian Westphal2024-05-107-19/+21
| * netfilter: nft_set_pipapo: remove dirty flagFlorian Westphal2024-05-102-27/+0
| * netfilter: nft_set_pipapo: move cloning of match info to insert/removal pathFlorian Westphal2024-05-101-21/+49
| * netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand cloneFlorian Westphal2024-05-101-7/+10
| * netfilter: nft_set_pipapo: merge deactivate helper into callerFlorian Westphal2024-05-061-30/+9
| * netfilter: nft_set_pipapo: prepare walk function for on-demand cloneFlorian Westphal2024-05-061-21/+39
| * netfilter: nft_set_pipapo: prepare destroy function for on-demand cloneFlorian Westphal2024-05-061-21/+6
| * netfilter: nft_set_pipapo: make pipapo_clone helper return NULLFlorian Westphal2024-05-061-7/+7
| * netfilter: nft_set_pipapo: move prove_locking helper aroundFlorian Westphal2024-05-061-11/+11
| * netfilter: conntrack: remove flowtable early-drop testFlorian Westphal2024-05-061-2/+0
| * netfilter: use NF_DROP instead of -NF_DROPJason Xing2024-05-061-1/+1
| * netfilter: conntrack: dccp: try not to drop skb in conntrackJason Xing2024-05-061-2/+2
| * netfilter: conntrack: fix ct-state for ICMPv6 Multicast Router DiscoveryLinus Lüssing2024-05-061-1/+3
| * netfilter: nf_tables: remove NETDEV_CHANGENAME from netdev chain event handlerPablo Neira Ayuso2024-05-061-5/+1
| * netfilter: nf_tables: skip transaction if update object is not implementedPablo Neira Ayuso2024-05-061-2/+6
* | ipvs: allow some sysctls in non-init user namespacesAlexander Mikhalitsyn2024-05-081-4/+15
* | ipvs: add READ_ONCE barrier for ipvs->sysctl_amemthreshAlexander Mikhalitsyn2024-05-081-7/+7
|/
* netfilter: Remove the now superfluous sentinel elements from ctl_table arrayJoel Granados2024-05-035-19/+5
* inet: introduce dst_rtable() helperEric Dumazet2024-05-013-4/+4
* ipv6: introduce dst_rt6_info() helperEric Dumazet2024-04-294-16/+12
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2024-04-252-3/+7
|\
| * netfilter: nf_tables: honor table dormant flag from netdev release event pathPablo Neira Ayuso2024-04-251-1/+3
| * ipvs: Fix checksumming on GSO of SCTP packetsIsmael Luceno2024-04-251-2/+4
* | netfilter: nfnetlink: Handle ACK flags for batch messagesDonald Hunter2024-04-231-0/+5
* | sysctl: treewide: constify ctl_table_header::ctl_table_argThomas Weißschuh2024-04-222-2/+2
* | Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski2024-04-188-38/+99
|\|
| * netfilter: nf_tables: fix memleak in map from abort pathPablo Neira Ayuso2024-04-181-2/+14
| * netfilter: nf_tables: restore set elements when delete set failsPablo Neira Ayuso2024-04-175-20/+45
| * netfilter: nf_tables: missing iterator type in lookup walkPablo Neira Ayuso2024-04-172-1/+3
| * netfilter: flowtable: incorrect pppoe tuplePablo Neira Ayuso2024-04-111-1/+1
| * netfilter: flowtable: validate pppoe headerPablo Neira Ayuso2024-04-112-4/+7
| * netfilter: nft_set_pipapo: do not free live elementFlorian Westphal2024-04-111-5/+9
| * netfilter: nft_set_pipapo: walk over current view on netlink dumpPablo Neira Ayuso2024-04-112-2/+9
| * netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()Ziyang Xuan2024-04-111-2/+6
| * netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()Ziyang Xuan2024-04-111-2/+6