projects
/
linux-2.6-block.git
/ search
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅
next
netfilter: nf_tables: reject invalid set policy
2024-01-17
Pablo Neira Ayuso
netfilter: nf_tables: reject invalid set policy
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2024-01-03
Pablo Neira Ayuso
netfilter: nft_immediate: drop chain reference counter...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2024-01-03
Brad Cowie
netfilter: nf_nat: fix action not being set for all...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-12-22
Pablo Neira Ayuso
netfilter: nf_tables: validate chain type update if...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-12-22
Felix Huettner
netfilter: ctnetlink: support filtering by zone
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-12-22
Florian Westphal
netfilter: nf_tables: mark newset as dead on transaction...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-12-22
Florian Westphal
netfilter: flowtable: reorder nf_flowtable struct members
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-12-22
Florian Westphal
netfilter: nft_set_pipapo: prefer gfp_kernel allocation
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-12-22
Phil Sutter
netfilter: nf_tables: Add locking for NFT_MSG_GETSETELEM_RES...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-12-22
Phil Sutter
netfilter: nf_tables: Introduce nft_set_dump_ctx_init()
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-12-22
Phil Sutter
netfilter: nf_tables: Pass const set to nft_get_set_elem
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-12-20
Pablo Neira Ayuso
netfilter: nf_tables: skip set commit for deleted/destroyed...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-12-20
Pablo Neira Ayuso
netfilter: nf_tables: set transport offset from mac...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-12-06
Phil Sutter
netfilter: xt_owner: Fix for unsafe access of sk->sk_socket
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-12-06
Pablo Neira Ayuso
netfilter: nf_tables: validate family when identifying...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-12-06
Pablo Neira Ayuso
netfilter: nf_tables: bail out on mismatching dynset...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-12-06
Florian Westphal
netfilter: nf_tables: fix 'exist' matching on bigendian...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-12-06
Florian Westphal
netfilter: nft_set_pipapo: skip inactive elements during...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-12-06
D. Wythe
netfilter: bpf: fix bad registration on nf_defrag
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-11-14
Pablo Neira Ayuso
netfilter: nf_tables: split async and sync catchall...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-11-14
Jozsef Kadlecsik
netfilter: ipset: fix race condition between swap/destroy...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-11-14
Pablo Neira Ayuso
netfilter: nf_tables: bogus ENOENT when destroying...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-11-14
Dan Carpenter
netfilter: nf_tables: fix pointer math issue in nft_byteorde...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-11-14
Linkui Xiao
netfilter: nf_conntrack_bridge: initialize err to 0
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-11-14
Yang Li
netfilter: nft_set_rbtree: Remove unused variable nft_net
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-11-08
Florian Westphal
netfilter: nat: fix ipv6 nat redirect with mapped and...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-11-08
Maciej Żenczykowski
netfilter: xt_recent: fix (increase) ipv6 literal buffer...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-11-08
Florian Westphal
ipvs: add missing module descriptions
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-11-08
Pablo Neira Ayuso
netfilter: nf_tables: remove catchall element in GC...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-11-08
Florian Westphal
netfilter: add missing module descriptions
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-10-25
Vlad Buslov
net/sched: act_ct: additional checks for outdated flows
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-10-25
Pablo Neira Ayuso
netfilter: flowtable: GC pushes back packets to classic...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-10-24
Phil Sutter
netfilter: nf_tables: Carry reset boolean in nft_set_dump_ctx
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-10-24
Pablo Neira Ayuso
netfilter: nf_tables: set->ops->insert returns opaque...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-10-24
Pablo Neira Ayuso
netfilter: nf_tables: shrink memory consumption of...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-10-24
Pablo Neira Ayuso
netfilter: nf_tables: expose opaque set element as...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-10-24
Pablo Neira Ayuso
netfilter: nf_tables: set backend .flush always succeeds
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-10-24
Pablo Neira Ayuso
netfilter: nft_set_pipapo: no need to call pipapo_deactivate...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-10-24
Phil Sutter
netfilter: nf_tables: Carry reset boolean in nft_obj_dump_ctx
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-10-24
Phil Sutter
netfilter: nf_tables: nft_obj_filter fits into cb->ctx
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-10-24
Phil Sutter
netfilter: nf_tables: Carry s_idx in nft_obj_dump_ctx
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-10-24
Phil Sutter
netfilter: nf_tables: A better name for nft_obj_filter
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-10-24
Phil Sutter
netfilter: nf_tables: Unconditionally allocate nft_obj_filter
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-10-24
Phil Sutter
netfilter: nf_tables: Drop pointless memset in nf_tables_dum...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-10-24
Florian Westphal
netfilter: conntrack: switch connlabels to atomic_t
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-10-24
Florian Westphal
br_netfilter: use single forward hook for ip and arp
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-10-24
Phil Sutter
netfilter: nf_tables: Add locking for NFT_MSG_GETRULE_RESET...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-10-24
Phil Sutter
netfilter: nf_tables: Introduce nf_tables_getrule_single()
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-10-24
Phil Sutter
netfilter: nf_tables: Open-code audit log call in nf_tables_...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-10-24
Florian Westphal
netfilter: nft_set_rbtree: prefer sync gc to async...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-10-24
Florian Westphal
netfilter: nft_set_rbtree: rename gc deactivate+erase...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-09-13
Phil Sutter
selftests: netfilter: Test nf_tables audit logging
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-09-13
Phil Sutter
netfilter: nf_tables: Fix entries val in rule reset...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-09-13
Florian Westphal
netfilter: conntrack: fix extension size table
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-09-11
Pablo Neira Ayuso
netfilter: nf_tables: disallow element removal on anonymous...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-09-08
Pablo Neira Ayuso
netfilter: nft_set_hash: try later when GC hits EAGAIN...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-09-08
Pablo Neira Ayuso
netfilter: nft_set_pipapo: stop GC iteration if GC...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-09-08
Pablo Neira Ayuso
netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-09-08
Pablo Neira Ayuso
netfilter: nft_set_rbtree: use read spinlock to avoid...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-09-08
Pablo Neira Ayuso
netfilter: nf_tables: disallow rule removal from chain...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-08-30
Phil Sutter
netfilter: nf_tables: Audit log rule reset
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-08-30
Phil Sutter
netfilter: nf_tables: Audit log setelem reset
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-08-30
Wander Lairson Costa
netfilter: xt_u32: validate user space input
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-08-30
Wander Lairson Costa
netfilter: xt_sctp: validate the flag_info count
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-08-30
Xiao Liang
netfilter: nft_exthdr: Fix non-linear header modification
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-08-10
Pablo Neira Ayuso
netfilter: nf_tables: remove busy mark and gc batch API
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-08-10
Pablo Neira Ayuso
netfilter: nft_set_hash: mark set element as dead when...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-08-10
Pablo Neira Ayuso
netfilter: nf_tables: adapt set backend to use GC transactio...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-08-10
Pablo Neira Ayuso
netfilter: nf_tables: GC transaction API to avoid race...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-08-09
Florian Westphal
netfilter: nf_tables: don't skip expired elements during...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-07-05
Thadeu Lima de Souza...
netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-07-05
Thadeu Lima de Souza...
netfilter: nf_tables: do not ignore genmask when looking...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-07-05
Florian Westphal
netfilter: conntrack: don't fold port numbers into...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-07-05
Florent Revest
netfilter: conntrack: Avoid nf_ct_helper_hash uses...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-07-05
Florian Westphal
netfilter: conntrack: gre: don't set assured flag for...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-07-05
Pablo Neira Ayuso
netfilter: nf_tables: report use refcount overflow
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-06-26
Pablo Neira Ayuso
netfilter: nf_tables: fix underflow in chain reference...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-06-26
Pablo Neira Ayuso
netfilter: nf_tables: unbind non-anonymous set if rule...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-06-26
Ilia.Gavrilov
netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-06-26
Randy Dunlap
linux/netfilter.h: fix kernel-doc warnings
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-06-26
Florian Westphal
netfilter: conntrack: dccp: copy entire header to stack...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-06-26
Jeremy Sowden
lib/ts_bm: reset initial match offset for every block...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-06-26
Florian Westphal
netfilter: nf_tables: limit allowed range via nla_policy
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-06-26
Phil Sutter
netfilter: nf_tables: Introduce NFT_MSG_GETSETELEM_RESET
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-06-26
Florian Westphal
netfilter: snat: evict closing tcp entries on reply...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-06-26
Florian Westphal
netfilter: nf_tables: permit update of set size
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-06-26
Florian Westphal
netfilter: ipset: remove rcu_read_lock_bh pair from...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-06-26
Pablo Neira Ayuso
netfilter: nft_payload: rebuild vlan header when needed
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-06-20
Phil Sutter
netfilter: nf_tables: Fix for deleting base chains...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-06-20
Pablo Neira Ayuso
netfilter: nfnetlink_osf: fix module autoload
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-06-20
Pablo Neira Ayuso
netfilter: nf_tables: drop module reference after updating...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-06-20
Pablo Neira Ayuso
netfilter: nf_tables: disallow timeout for anonymous...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-06-20
Pablo Neira Ayuso
netfilter: nf_tables: disallow updates of anonymous...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-06-20
Pablo Neira Ayuso
netfilter: nf_tables: reject unbound chain set before...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-06-20
Pablo Neira Ayuso
netfilter: nf_tables: reject unbound anonymous set...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-06-20
Pablo Neira Ayuso
netfilter: nf_tables: disallow element updates of bound...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-06-20
Pablo Neira Ayuso
netfilter: nf_tables: fix underflow in object reference...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-06-20
Pablo Neira Ayuso
netfilter: nft_set_pipapo: .walk does not deal with...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-06-20
Pablo Neira Ayuso
netfilter: nf_tables: drop map element references from...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
2023-06-20
Pablo Neira Ayuso
netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to...
Signed-off-by: Pablo Neira Ayuso <
pablo@netfilter.org
>
commit
|
commitdiff
|
tree
next
projects / linux-2.6-block.git / search