aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter/ipset
AgeCommit message (Expand)AuthorFilesLines
2024-02-08netfilter: ipset: Missing gc cancellations fixedJozsef Kadlecsik2-2/+4
2024-01-31netfilter: ipset: fix performance regression in swap operationJozsef Kadlecsik4-18/+61
2024-01-17netfilter: propagate net to nf_bridge_get_physindevPavel Tikhomirov1-4/+4
2023-12-27Kill sched.h dependency on rcupdate.hKent Overstreet2-0/+3
2023-11-14netfilter: ipset: fix race condition between swap/destroy and kernel side add...Jozsef Kadlecsik1-7/+7
2023-09-20netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAPJozsef Kadlecsik1-2/+10
2023-09-06netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash...Kyle Zeng1-0/+1
2023-08-22netfilter: ipset: refactor deprecated strncpyJustin Stitt1-5/+5
2023-06-28Merge tag 'net-next-6.5' of git://git.kernel.org/pub/scm/linux/kernel/git/net...Linus Torvalds1-2/+0
2023-06-27Merge tag 'hardening-v6.5-rc1' of git://git.kernel.org/pub/scm/linux/kernel/g...Linus Torvalds1-5/+5
2023-06-26Merge tag 'nf-next-23-06-26' of git://git.kernel.org/pub/scm/linux/kernel/git...Jakub Kicinski1-2/+0
2023-06-26netfilter: ipset: remove rcu_read_lock_bh pair from ip_set_testFlorian Westphal1-2/+0
2023-06-20netfilter: ipset: Replace strlcpy with strscpyAzeem Shaikh1-5/+5
2023-06-07netfilter: ipset: Add schedule point in call_ad().Kuniyuki Iwashima1-0/+8
2023-01-25net: Kconfig: fix spellosRandy Dunlap1-1/+1
2023-01-11netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.Gavrilov Ilia1-2/+2
2023-01-05Merge tag 'net-6.2-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/netd...Linus Torvalds11-99/+88
2023-01-02netfilter: ipset: Rework long task execution when adding/deleting entriesJozsef Kadlecsik10-80/+67
2023-01-02netfilter: ipset: fix hash:net,port,net hang with /0 subnetJozsef Kadlecsik1-19/+21
2022-12-25treewide: Convert del_timer*() to timer_shutdown*()Steven Rostedt (Google)1-1/+1
2022-12-12Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-nextJakub Kicinski4-26/+114
2022-11-30netfilter: ipset: Add support for new bitmask parameterVishwanath Pai4-26/+114
2022-11-22netfilter: ipset: restore allowing 64 clashing elements in hash:net,ifaceJozsef Kadlecsik1-1/+1
2022-11-21netfilter: ipset: regression in ip_set_hash_ip.cVishwanath Pai1-5/+3
2022-11-02netfilter: ipset: enforce documented limit to prevent allocating huge memoryJozsef Kadlecsik1-24/+6
2022-09-07netfilter: move from strlcpy with unused retval to strscpyWolfram Sang1-2/+2
2022-09-05netlink: Bounds-check struct nlmsgerr creationKees Cook1-3/+5
2021-09-14netfilter: ipset: Fix oversized kvmalloc() callsJozsef Kadlecsik1-2/+2
2021-08-04netfilter: ipset: Limit the maximal range of consecutive elements to add/deleteJozsef Kadlecsik10-7/+85
2021-05-29netfilter: use nfnetlink_unicast()Pablo Neira Ayuso1-40/+10
2021-04-26netfilter: nfnetlink: consolidate callback typesPablo Neira Ayuso1-0/+16
2021-04-26netfilter: nfnetlink: add struct nfnl_info and pass it to callbacksPablo Neira Ayuso1-87/+62
2021-03-31netfilter: add helper function to set up the nfnetlink header and use itPablo Neira Ayuso1-14/+3
2020-12-17netfilter: ipset: fix shift-out-of-bounds in htable_bits()Vasily Averin1-15/+5
2020-12-17netfilter: ipset: fixes possible oops in mtype_resizeVasily Averin1-9/+13
2020-12-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-2/+1
2020-11-26netfilter: ipset: prevent uninit-value in hash_ip6_addEric Dumazet1-2/+1
2020-11-16treewide: rename nla_strlcpy to nla_strscpy.Francis Laniel1-2/+2
2020-11-06Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-1/+2
2020-10-31netfilter: ipset: Expose the initval hash parameter to userspaceJozsef Kadlecsik13-16/+33
2020-10-31netfilter: ipset: Add bucketsize parameter to all hash typesJozsef Kadlecsik14-39/+71
2020-10-31netfilter: ipset: Support the -exist flag with the destroy commandJozsef Kadlecsik1-1/+3
2020-10-31netfilter: ipset: Update byte and packet counters regardless of whether they ...Stefano Brivio1-1/+2
2020-10-04netfilter: ipset: enable memory accounting for ipset allocationsVasily Averin1-16/+1
2020-07-22netfilter: Use fallthrough pseudo-keywordGustavo A. R. Silva1-1/+1
2020-06-30netfilter: ipset: call ip_set_free() instead of kfree()Eric Dumazet4-5/+5
2020-06-25netfilter: ipset: fix unaligned atomic accessRussell King1-0/+2
2020-05-25netfilter: ipset: Fix subcounter update skipPhil Sutter1-1/+1
2020-04-06netfilter: ipset: Pass lockdep expression to RCU listsAmol Grover1-1/+2
2020-03-15netfilter: Replace zero-length array with flexible-array memberGustavo A. R. Silva4-5/+5
2020-02-22netfilter: ipset: Fix forceadd evaluation pathJozsef Kadlecsik1-0/+2
2020-02-22netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reportsJozsef Kadlecsik2-205/+462
2020-01-29netfilter: ipset: fix suspicious RCU usage in find_set_and_idKadlecsik József1-20/+21
2020-01-20netfilter: ipset: use bitmap infrastructure completelyKadlecsik József4-10/+10
2020-01-13netfilter: fix a use-after-free in mtype_destroy()Cong Wang1-1/+1
2020-01-08netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is presentFlorian Westphal1-1/+2
2019-11-13Merge branch 'master' of git://blackhole.kfki.hu/nf-nextPablo Neira Ayuso1-5/+18
2019-11-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netDavid S. Miller4-17/+36
2019-11-04netfilter: ipset: Fix nla_policies to fully support NL_VALIDATE_STRICTJozsef Kadlecsik3-13/+30
2019-11-04netfilter: ipset: Copy the right MAC address in hash:ip,mac IPv6 setsStefano Brivio1-1/+1
2019-11-04netfilter: ipset: Fix an error code in ip_set_sockfn_get()Dan Carpenter1-3/+5
2019-11-04netfilter: ipset: Add wildcard support to net,ifaceKristian Evensen1-5/+18
2019-10-07netfilter: ipset: move ip_set_get_ip_port() to ip_set_bitmap_port.c.Jeremy Sowden2-28/+27
2019-10-07netfilter: ipset: move function to ip_set_bitmap_ip.c.Jeremy Sowden1-0/+12
2019-10-07netfilter: ipset: make ip_set_put_flags extern.Jeremy Sowden1-0/+24
2019-10-07netfilter: ipset: move functions to ip_set_core.c.Jeremy Sowden1-0/+102
2019-10-07netfilter: ipset: move ip_set_comment functions from ip_set.h to ip_set_core.c.Jeremy Sowden1-1/+65
2019-10-07netfilter: ipset: remove inline from static functions in .c files.Jeremy Sowden19-138/+138
2019-08-13Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextJakub Kicinski2-3/+3
2019-08-13netfilter: inline four headers files into another one.Jeremy Sowden1-1/+1
2019-08-13netfilter: remove unnecessary spacesyangxingwu2-2/+2
2019-07-29netfilter: ipset: Fix rename concurrency with listingJozsef Kadlecsik1-1/+1
2019-07-29netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and hash:ip,mac...Stefano Brivio2-2/+2
2019-07-29netfilter: ipset: Actually allow destination MAC address for hash:ip,mac sets...Stefano Brivio1-4/+0
2019-06-25Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextPablo Neira Ayuso20-106/+34
2019-06-19treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500Thomas Gleixner20-80/+20
2019-06-10Update my email addressJozsef Kadlecsik19-32/+32
2019-06-10ipset: Fix memory accounting for hash types on resizeStefano Brivio1-1/+1
2019-06-10netfilter: ipset: Fix the last missing check of nla_parse_deprecated()Jozsef Kadlecsik1-4/+6
2019-06-10netfilter: ipset: fix a missing check of nla_parseAditya Pakki1-3/+7
2019-06-10netfilter: ipset: merge uadd and udel functionsFlorent Fourcot1-51/+20
2019-06-10netfilter: ipset: remove useless memset() callsFlorent Fourcot1-2/+0
2019-05-21treewide: Add SPDX license identifier - Makefile/KconfigThomas Gleixner1-0/+1
2019-05-21treewide: Add SPDX license identifier for missed filesThomas Gleixner1-0/+1
2019-04-27netlink: make validation more configurable for future strictnessJohannes Berg1-22/+14
2019-04-27ipset: drop ipset_nest_start() and ipset_nest_end()Michal Kubecek3-21/+21
2018-12-20Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller5-44/+180
2018-12-14netfilter: ipset: replace a strncpy() with strscpy()Qian Cai1-2/+4
2018-12-14netfilter: ipset: fix ip_set_byindex functionFlorent Fourcot1-1/+1
2018-12-13netfilter: ipset: do not call ipset_nest_end after nla_nest_cancelPan Bian1-1/+1
2018-12-01netfilter: Replace call_rcu_bh(), rcu_barrier_bh(), and synchronize_rcu_bh()Paul E. McKenney1-2/+2
2018-11-12Merge branch 'master' of git://blackhole.kfki.hu/nf-nextPablo Neira Ayuso4-40/+174
2018-11-03netfilter: ipset: Fix calling ip_set() macro at dumpingJozsef Kadlecsik1-4/+8
2018-11-01netfilter: ipset: fix ip_set_list allocation failureAndrey Ryabinin1-4/+4
2018-11-01netfilter: ipset: actually allow allowable CIDR 0 in hash:net,port,netEric Westbrook1-4/+4
2018-11-01netfilter: ipset: list:set: Decrease refcount synchronously on deletion and r...Stefano Brivio2-18/+22
2018-10-27netfilter: ipset: Introduction of new commands and protocol version 7Jozsef Kadlecsik1-17/+147
2018-10-22netfilter: ipset: Make invalid MAC address checks consistentStefano Brivio2-7/+7
2018-10-22netfilter: ipset: Allow matching on destination MAC address for mac and ipmac...Stefano Brivio3-16/+20
2018-10-16netfilter: Replace spin_is_locked() with lockdepLance Roy1-1/+1
2018-06-06netfilter: ipset: forbid family for hash:mac setsFlorent Fourcot1-1/+4
2018-03-30Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-5/+2
2018-03-30netfilter: ipset: Use is_zero_ether_addr instead of static and memcmpJoe Perches1-5/+2
2018-03-27net: Drop pernet_operations::asyncKirill Tkhai1-1/+0
2018-03-05net: Convert ip_set_net_opsKirill Tkhai1-1/+2
2018-02-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller6-63/+63
2018-01-31netfilter: ipset: Fix wraparound in hash:*net* typesJozsef Kadlecsik6-63/+63
2018-01-19netfilter: remove messages print and boot/module load timePablo Neira Ayuso1-1/+2
2018-01-08netfilter: ipset: Missing nfnl_lock()/nfnl_unlock() is added to ip_set_net_ex...Jozsef Kadlecsik1-0/+2
2018-01-08netfilter: ipset: Fix "don't update counters" mode when counters used at the ...Jozsef Kadlecsik4-46/+46
2018-01-08netfilter: ipset: use swap macro instead of _manually_ swapping valuesGustavo A. R. Silva3-18/+6
2018-01-08netfilter: ipset: add resched points during set listingFlorian Westphal3-2/+2
2018-01-08netfilter: ipset: use nfnl_mutex_is_lockedFlorian Westphal1-1/+1
2018-01-08netfilter: mark expected switch fall-throughsGustavo A. R. Silva1-1/+1
2017-11-08Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller3-263/+139
2017-11-04Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+1
2017-11-02License cleanup: add SPDX GPL-2.0 license identifier to files with no licenseGreg Kroah-Hartman1-0/+1
2017-10-18netfilter: ipset: Convert timers to use timer_setup()Kees Cook6-15/+25
2017-10-04netfilter: ipset: deduplicate prefixlen mapsAaron Conole1-258/+137
2017-10-04netfilter: ipset: Fix sparse warningsJozsef Kadlecsik1-1/+1
2017-10-04netfilter: ipset: Compress return logicsimran singhal1-4/+1
2017-09-29netfilter: ipset: Fix race between dump and swapRoss Lagerwall1-2/+5
2017-09-26netfilter: ipset: pernet ops must be unregistered lastFlorian Westphal1-9/+13
2017-09-26netfilter: ipset: Fix adding an IPv4 range containing more than 2^31 addressesJozsef Kadlecsik10-22/+24
2017-09-18netfilter: ipset: ipset list may return wrong member count for set with timeoutVishwanath Pai1-1/+13
2017-07-01sctp: remove the typedef sctp_sctphdr_tXin Long1-2/+2
2017-06-19netfilter: nfnetlink: extended ACK reportingPablo Neira Ayuso1-13/+26
2017-05-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2-14/+5
2017-04-15ipset: remove unused function __ip_set_get_netlinkAaron Conole1-8/+0
2017-04-13netlink: pass extended ACK struct to parsing functionsJohannes Berg1-13/+14
2017-04-13netlink: extended ACK reportingJohannes Berg1-1/+1
2017-04-07netfilter: Remove exceptional & on function nameArushi Singhal1-1/+1
2017-04-07netfilter: Remove unnecessary cast on void pointersimran singhal2-4/+3
2017-04-07netfilter: Add nfnl_msg_type() helper functionPablo Neira Ayuso1-1/+1
2017-02-19netfilter: ipset: Null pointer exception in ipset list:setVishwanath Pai1-3/+6
2017-02-19Fix bug: sometimes valid entries in hash:* types of sets were evictedJozsef Kadlecsik1-1/+1
2016-11-18netns: make struct pernet_operations::id unsigned intAlexey Dobriyan1-1/+1
2016-11-10netfilter: ipset: hash: fix boolreturn.cocci warningskbuild test robot1-4/+4
2016-11-10netfilter: ipset: use setup_timer() and mod_timer().Jozsef Kadlecsik3-15/+6
2016-11-10netfilter: ipset: hash:ipmac type support added to ipsetTomasz Chilinski3-0/+325
2016-11-10netfilter: ipset: Fix reported memory size for hash:* typesJozsef Kadlecsik1-7/+9
2016-11-10netfilter: ipset: Collapse same condition body to a single oneJozsef Kadlecsik1-7/+1
2016-11-10netfilter: ipset: Make struct htype per ipset familyJozsef Kadlecsik11-74/+63
2016-11-10netfilter: ipset: Optimize hash creation routineJozsef Kadlecsik1-34/+29
2016-11-10netfilter: ipset: Make sure element data size is a multiple of u32Jozsef Kadlecsik1-2/+8
2016-11-10netfilter: ipset: Make NLEN compile time constant for hash typesJozsef Kadlecsik1-28/+23
2016-11-10netfilter: ipset: Simplify mtype_expire() for hash typesJozsef Kadlecsik1-13/+12
2016-11-10netfilter: ipset: Remove redundant mtype_expire() argumentsJozsef Kadlecsik1-4/+5
2016-11-10netfilter: ipset: Count non-static extension memory for userspaceJozsef Kadlecsik4-17/+21
2016-11-10netfilter: ipset: Add element count to all set types headerJozsef Kadlecsik3-13/+24
2016-11-10netfilter: ipset: Add element count to hash headersEric B Munson1-1/+2
2016-11-10netfilter: ipset: Separate memsize calculation code into dedicated functionJozsef Kadlecsik2-7/+27
2016-11-10netfilter: ipset: Improve skbinfo get/init helpersJozsef Kadlecsik1-6/+6
2016-11-03netfilter: x_tables: move hook state into xt_action_param structurePablo Neira Ayuso2-4/+4
2016-03-28netfilter: ipset: fix race condition in ipset save, swap and deleteVishwanath Pai4-8/+31
2016-03-08netfilter: ipset: Check IPSET_ATTR_ETHER netlink attribute lengthJozsef Kadlecsik2-1/+4
2016-02-24netfilter: ipset: Fix set:list type crash when flush/dump set in parallelJozsef Kadlecsik2-30/+28
2016-01-13netfilter: ipset: allow a 0 netmask with hash_netiface typeFlorian Westphal1-4/+0
2015-12-28netfilter: nfnetlink: pass down netns pointer to call() and call_rcu()Pablo Neira Ayuso1-61/+47
2015-11-07netfilter: ipset: Fix hash type expire: release empty hash bucket blockJozsef Kadlecsik1-4/+9
2015-11-07netfilter: ipset: Fix hash:* type expirationJozsef Kadlecsik1-1/+1
2015-11-07netfilter: ipset: Fix extension alignmentJozsef Kadlecsik7-79/+64
2015-10-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-1/+1
2015-10-17netfilter: ipset: Fix sleeping memory allocation in atomic contextNikolay Borisov1-1/+1
2015-09-18netfilter: x_tables: Use par->net instead of computing from the passed net de...Eric W. Biederman1-6/+3
2015-08-29netfilter: ipset: Fixing unnamed union initElad Raz2-4/+36
2015-08-28netfilter: ipset: Out of bound access in hash:net* types fixedJozsef Kadlecsik1-4/+8
2015-06-14netfilter: ipset: Fix coding styles reported by checkpatch.plJozsef Kadlecsik20-269/+298
2015-06-14netfilter: ipset: Introduce RCU locking in list typeJozsef Kadlecsik1-209/+189
2015-06-14netfilter: ipset: Introduce RCU locking in hash:* typesJozsef Kadlecsik12-236/+364
2015-06-14netfilter: ipset: Introduce RCU locking in bitmap:* typesJozsef Kadlecsik4-14/+38
2015-06-14netfilter: ipset: Prepare the ipset core to use RCU at set levelJozsef Kadlecsik1-22/+22
2015-06-14netfilter:ipset Remove rbtree from hash:net,ifaceJozsef Kadlecsik1-143/+20
2015-06-14netfilter: ipset: Make sure listing doesn't grab a set which is just being de...Jozsef Kadlecsik1-15/+34
2015-06-14netfilter: ipset: Fix parallel resizing and listing of the same setJozsef Kadlecsik2-15/+58
2015-06-14netfilter: ipset: Fix cidr handling for hash:*net* typesJozsef Kadlecsik7-34/+42
2015-06-14netfilter: ipset: Check CIDR value only when attribute is givenSergey Popovich4-49/+41
2015-06-14netfilter: ipset: Make sure we always return line number on batchSergey Popovich15-75/+75
2015-06-14netfilter: ipset: Permit CIDR equal to the host address CIDR in IPv6Sergey Popovich5-15/+43
2015-06-14netfilter: ipset: Check extensions attributes before getting extensions.Sergey Popovich16-170/+29
2015-06-14netfilter: ipset: Use SET_WITH_*() helpers to test set extensionsSergey Popovich2-7/+7
2015-05-14netfilter: ipset: deinline ip_set_put_extensions()Denys Vlasenko1-0/+25
2015-05-13netfilter: ipset: Improve preprocessor macros checksSergey Popovich3-7/+18
2015-05-13netfilter: ipset: Fix hashing for ipv6 setsSergey Popovich5-8/+2
2015-05-13netfilter: ipset: Check for comment netlink attribute lengthSergey Popovich15-15/+30
2015-05-13netfilter: ipset: Return bool values instead of intSergey Popovich10-38/+43
2015-05-13netfilter: ipset: Use HOST_MASK literal to represent host address CIDR lenSergey Popovich7-9/+11
2015-05-13netfilter: ipset: Check IPSET_ATTR_PORT only onceSergey Popovich5-40/+10
2015-05-13netfilter: ipset: Return ipset error instead of boolSergey Popovich12-48/+126
2015-05-13netfilter: ipset: Preprocessor directices cleanupSergey Popovich12-34/+4
2015-05-13netfilter: ipset: No need to make nomatch bitfieldSergey Popovich1-2/+2
2015-05-13netfilter: ipset: Properly calculate extensions offsets and total lengthSergey Popovich1-3/+3
2015-05-13netfilter: ipset: make ip_set_get_ip*_port to use skb_network_offsetAlexander Drozdov1-2/+4
2015-05-13netfilter: ipset: Give a better name to a macro in ip_set_core.cJozsef Kadlecsik1-9/+9
2015-05-13netfilter: ipset: Fix sparse warningJozsef Kadlecsik1-2/+2
2015-04-08netfilter: bridge: add helpers for fetching physin/outdevFlorian Westphal1-8/+24
2014-12-03netfilter: ipset: Explicitly add padding elements to hash:net, net and hash:n...Jozsef Kadlecsik2-0/+4
2014-12-03netfilter: ipset: Allocate the proper size of memory when /0 networks are sup...Jozsef Kadlecsik1-2/+1
2014-12-03netfilter: ipset: Simplify cidr handling for hash:*net* typesJozsef Kadlecsik1-28/+28
2014-12-03netfilter: ipset: Indicate when /0 networks are supportedJozsef Kadlecsik2-1/+2
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-03 14:56:23 +0000