Commits · d4bb5caa9cc1a802ba25f605b24b5640c025806b · jan.koester / Linux · GitLab

Sep 24, 2016
- netfilter: Only allow sane values in nf_register_net_hook · d4bb5caa
  Aaron Conole authored Sep 21, 2016
  d4bb5caa
- netfilter: Remove explicit rcu_read_lock in nf_hook_slow · e2361cb9
  Aaron Conole authored Sep 21, 2016
  e2361cb9
- netfilter: call nf_hook_ingress with rcu_read_lock · 2c1e2703
  Aaron Conole authored Sep 21, 2016
  2c1e2703
- netfilter: call nf_hook_state_init with rcu_read_lock held · fe72926b
  Florian Westphal authored Sep 21, 2016
  fe72926b
- netfilter: bridge: add and use br_nf_hook_thresh · c5136b15
  Florian Westphal authored Sep 21, 2016
  c5136b15
- netfilter: xt_TCPMSS: Refactor the codes to decrease one condition check and more readable · 50f4c7b7
  Gao Feng authored Sep 07, 2016
  50f4c7b7
Sep 23, 2016
- netfilter: nft_lookup: remove superfluous element found check · 4004d5c3
  Pablo Neira Ayuso authored Sep 20, 2016
  4004d5c3
- netfilter: xt_helper: Use sizeof(variable) instead of literal number · b9d80f83
  Gao Feng authored Sep 20, 2016
  b9d80f83
- netfilter: Enhance the codes used to get random once · 7bdc6624
  Gao Feng authored Sep 18, 2016
  7bdc6624
- netfilter: nf_tables: check tprot_set first when we use xt.thoff · a20877b5
  Liping Zhang authored Sep 17, 2016
  a20877b5
- netfilter: nf_tables: improve nft payload fast eval · 8dc3c2b8
  Liping Zhang authored Sep 15, 2016
  8dc3c2b8
- netfilter: nf_queue: improve queue range support for bridge family · 2462f3f4
  Liping Zhang authored Sep 15, 2016
  2462f3f4
- netfilter: nft_queue: add _SREG_QNUM attr to select the queue number · 8061bb54
  Liping Zhang authored Sep 14, 2016
  8061bb54
- netfilter: nf_tables: validate maximum value of u32 netlink attributes · 36b701fa
  Laura Garcia Liebana authored Sep 14, 2016
  36b701fa
Sep 22, 2016
- netfilter: nft_numgen: add number generation offset · 2b03bf73
  Laura Garcia Liebana authored Sep 13, 2016
  2b03bf73
Sep 13, 2016
- netfilter: nft_hash: fix hash overflow validation · 14e2dee0
  Laura Garcia Liebana authored Sep 13, 2016
  14e2dee0
Sep 12, 2016
- netfilter: nft_numgen: fix race between num generate and store it · 2e917d60
  Liping Zhang authored Sep 12, 2016
  2e917d60
- netfilter: conntrack: remove packet hotpath stats · 8e8118f8
  Florian Westphal authored Sep 11, 2016
  8e8118f8
- netfilter: nf_queue: get rid of dependency on IP6_NF_IPTABLES · 6bd14303
  Liping Zhang authored Sep 11, 2016
  6bd14303
- netfilter: Add the missed return value check of nft_register_chain_type · 23d07508
  Gao Feng authored Sep 10, 2016
  23d07508
- netfilter: Add the missed return value check of register_netdevice_notifier · 4e6577de
  Gao Feng authored Sep 09, 2016
  4e6577de
- netfilter: nf_conntrack: simplify __nf_ct_try_assign_helper() return logic · cf71c03e
  Pablo Neira authored Sep 09, 2016
  cf71c03e
- netfilter: nf_tables: don't drop IPv6 packets that cannot parse transport · 71212c9b
  Pablo Neira Ayuso authored Sep 09, 2016
  71212c9b
- netfilter: nf_tables_bridge: use nft_set_pktinfo_ipv{4, 6}_validate · 10151d7b
  Pablo Neira Ayuso authored Sep 09, 2016
  10151d7b
- netfilter: introduce nft_set_pktinfo_{ipv4, ipv6}_validate() · ddc8b602
  Pablo Neira Ayuso authored Sep 09, 2016
  ddc8b602
- netfilter: nf_tables_ipv6: setup pktinfo transport field on failure to parse · 8df9e32e
  Pablo Neira Ayuso authored Sep 09, 2016
  8df9e32e
- netfilter: nf_tables: ensure proper initialization of nft_pktinfo fields · beac5afa
  Pablo Neira Ayuso authored Sep 09, 2016
  beac5afa
- netfilter: nft_dynset: allow to invert match criteria · dbd2be06
  Pablo Neira Ayuso authored Sep 07, 2016
  dbd2be06
- netfilter: nft_hash: Add hash offset value · 70ca767e
  Laura Garcia Liebana authored Sep 06, 2016
  70ca767e
Sep 09, 2016
- netfilter: nf_conntrack: remove unused ctl_table_path member in nf_conntrack_l3proto · 3c15b8e1
  Liping Zhang authored Sep 06, 2016
  3c15b8e1
- netfilter: nft_queue: check the validation of queues_total and queuenum · fe01111d
  Liping Zhang authored Sep 06, 2016
  fe01111d
Sep 07, 2016
- netfilter: nf_ct_sip: allow tab character in SIP headers · 1bcabc81
  Marco Angaroni authored Aug 30, 2016
  1bcabc81
- netfilter: nft_quota: introduce nft_overquota() · 22609b43
  Pablo Neira Ayuso authored Sep 02, 2016
  22609b43
- netfilter: nft_quota: fix overquota logic · db6d857b
  Pablo Neira Ayuso authored Sep 02, 2016
  db6d857b
- netfilter: nft_numgen: rename until attribute by modulus · 0d9932b2
  Laura Garcia Liebana authored Sep 02, 2016
  0d9932b2
- netfilter: ftp: Remove the useless code · ddb075b0
  Gao Feng authored Sep 01, 2016
  ddb075b0
- netfilter: ftp: Remove the useless dlen==0 condition check in find_pattern · 723eb299
  Gao Feng authored Sep 01, 2016
  723eb299
- netfilter: nf_ct_sip: correct allowed characters in Call-ID SIP header · f0608cea
  Marco Angaroni authored Aug 30, 2016
  f0608cea
- netfilter: nf_ct_sip: correct parsing of continuation lines in SIP headers · 68cb9fe4
  Marco Angaroni authored Aug 30, 2016
  68cb9fe4
- netfilter: gre: Use consistent GRE and PTTP header structure instead of the... · c579a9e7
  Gao Feng authored Aug 25, 2016
  c579a9e7