aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter/nft_compat.c
AgeCommit message (Expand)AuthorFilesLines
2024-02-28netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()Ignat Korchagin1-0/+20
2024-02-07netfilter: nft_compat: restrict match/target protocol to u16Pablo Neira Ayuso1-1/+7
2024-02-07netfilter: nft_compat: reject unused compat flagPablo Neira Ayuso1-1/+2
2024-02-07netfilter: nft_compat: narrow down revision to unsigned 8-bitsPablo Neira Ayuso1-3/+3
2024-01-24netfilter: nf_tables: validate NFPROTO_* familyPablo Neira Ayuso1-0/+12
2022-11-15netfilter: nf_tables: Extend nft_expr_ops::dump callback parametersPhil Sutter1-3/+6
2022-03-20netfilter: nf_tables: do not reduce read-only expressionsPablo Neira Ayuso1-0/+1
2022-02-04netfilter: nft_compat: suppress comment matchFlorian Westphal1-0/+9
2021-09-21netfilter: log: work around missing softdep backend moduleFlorian Westphal1-1/+16
2021-08-01netfilter: nft_compat: use nfnetlink_unicast()Pablo Neira Ayuso1-5/+3
2021-06-07netfilter: nfnetlink: add struct nfgenmsg to struct nfnl_info and use itPablo Neira Ayuso1-11/+6
2021-05-29netfilter: nf_tables: remove xt_action_param from nft_pktinfoFlorian Westphal1-10/+18
2021-04-26netfilter: nfnetlink: consolidate callback typesPablo Neira Ayuso1-3/+6
2021-04-26netfilter: nfnetlink: pass struct nfnl_info to rcu callbacksPablo Neira Ayuso1-13/+11
2021-03-31netfilter: add helper function to set up the nfnetlink header and use itPablo Neira Ayuso1-8/+3
2020-08-10netfilter: nft_compat: remove flush counter optimizationFlorian Westphal1-23/+14
2020-07-31netfilter: nft_compat: make sure xtables destructors have runFlorian Westphal1-4/+32
2020-06-25netfilter: Add MODULE_DESCRIPTION entries to kernel modulesRob Gill1-0/+1
2019-06-19treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500Thomas Gleixner1-4/+1
2019-04-27netlink: make validation more configurable for future strictnessJohannes Berg1-2/+2
2019-02-27netfilter: nft_compat: use .release_ops and remove list of extensionPablo Neira Ayuso1-226/+55
2019-02-13netfilter: nft_compat: use-after-free when deleting targetsPablo Neira Ayuso1-1/+2
2019-02-05netfilter: nft_compat: don't use refcount_inc on newly allocated entryFlorian Westphal1-39/+23
2019-02-04netfilter: nf_tables: unbind set in rule from commit pathPablo Neira Ayuso1-1/+5
2019-01-18netfilter: nft_compat: destroy function must not have side effectsFlorian Westphal1-1/+47
2019-01-18netfilter: nft_compat: make lists per netnsFlorian Westphal1-40/+89
2019-01-18netfilter: nft_compat: use refcnt_t type for nft_xt reference countFlorian Westphal1-8/+8
2018-11-13netfilter: nf_tables: fix use-after-free when deleting compat expressionsFlorian Westphal1-1/+2
2018-11-03netfilter: nft_compat: ebtables 'nat' table is normal chain typeFlorian Westphal1-9/+12
2018-10-11netfilter: nft_compat: do not dump private areaPablo Neira Ayuso1-2/+22
2018-07-09netfilter: nft_compat: explicitly reject ERROR and standard targetFlorian Westphal1-0/+13
2018-05-29netfilter: nft_compat: use call_rcu for nfnl_compat_getFlorian Westphal1-11/+18
2018-05-09netfilter: nft_compat: fix handling of large matchinfo sizeFlorian Westphal1-1/+63
2018-05-09netfilter: nft_compat: prepare for indirect info storageFlorian Westphal1-11/+36
2018-05-08netfilter: nf_tables: nft_compat: fix refcount leak on xt moduleFlorian Westphal1-34/+58
2018-01-19netfilter: remove messages print and boot/module load timePablo Neira Ayuso1-2/+0
2018-01-10netfilter: nf_tables: add single table list for all familiesPablo Neira Ayuso1-8/+8
2018-01-08netfilter: nf_tables: remove multihook chains and familiesPablo Neira Ayuso1-4/+4
2017-07-19netfilter: nft_compat: check extension hook mask only if setPablo Neira Ayuso1-2/+2
2017-06-19netfilter: nfnetlink: extended ACK reportingPablo Neira Ayuso1-1/+2
2017-05-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-6/+7
2017-04-13netlink: pass extended ACK struct to parsing functionsJohannes Berg1-1/+1
2017-04-07netfilter: Add nfnl_msg_type() helper functionPablo Neira Ayuso1-1/+1
2017-04-06netfilter: nf_tables: add nft_is_base_chain() helperPablo Neira Ayuso1-5/+6
2017-03-06netfilter: nf_tables: validate the expr explicitly after init successfullyLiping Zhang1-8/+0
2016-07-23netfilter: nft_compat: fix crash when related match/target module is removedLiping Zhang1-23/+20
2016-07-23netfilter: nft_compat: put back match/target module if init failLiping Zhang1-8/+24
2016-03-11netfilter: nft_compat: check match/targetinfo attr sizeFlorian Westphal1-0/+6
2015-12-28netfilter: nfnetlink: pass down netns pointer to call() and call_rcu()Pablo Neira Ayuso1-3/+3
2015-09-14netfilter: nft_compat: skip family comparison in case of NFPROTO_UNSPECPablo Neira Ayuso1-6/+18
2015-05-15netfilter: x_tables: add context to know if extension runs from nft_compatPablo Neira Ayuso1-0/+2
2015-04-13netfilter: nf_tables: get rid of NFT_REG_VERDICT usagePatrick McHardy1-13/+13
2015-04-08netfilter: Fix switch statement warnings with recent gcc.David Miller1-3/+3
2015-03-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+6
2015-03-22netfilter: nft_compat: set IP6T_F_PROTO flag if protocol is setPablo Neira Ayuso1-0/+6
2015-03-09Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-7/+7
2015-03-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-2/+10
2015-03-02netfilter: nft_compat: add support for arptables extensionsArturo Borrero1-0/+9
2015-02-22netfilter: nft_compat: don't truncate ethernet protocol type to u8Arturo Borrero1-7/+7
2015-02-20Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller1-2/+10
2015-02-16netfilter: nft_compat: fix module refcount underflowPablo Neira Ayuso1-2/+10
2015-01-30netfilter: nft_compat: add ebtables supportArturo Borrero1-6/+57
2014-11-12netfilter: nft_compat: use the match->table to validate dependenciesPablo Neira Ayuso1-2/+2
2014-11-12netfilter: nft_compat: relax chain type validationPablo Neira Ayuso1-30/+2
2014-11-12netfilter: nft_compat: use current net namespacePablo Neira Ayuso1-2/+2
2014-10-27netfilter: nft_compat: fix wrong target lookup in nft_target_select_ops()Arturo Borrero1-1/+1
2014-10-18netfilter: nft_compat: validate chain type in match/targetPablo Neira Ayuso1-9/+66
2014-10-14netfilter: nft_compat: fix hook validation for non-base chainsPablo Neira Ayuso1-0/+4
2014-10-02netfilter: nft_compat: remove incomplete 32/64 bits arch compat codePablo Neira Ayuso1-101/+15
2014-06-16netfilter: nft_compat: call {target, match}->destroy() to cleanup entryPablo Neira Ayuso1-0/+18
2014-03-08netfilter: nf_tables: restore context for expression destructorsPatrick McHardy1-2/+2
2014-01-07netfilter: nf_tables: add support for multi family tablesPatrick McHardy1-4/+4
2013-11-18netfilter: nft_compat: fix error path in nft_parse_compat()Pablo Neira Ayuso1-6/+13
2013-11-04netfilter: nft_compat: use _safe version of list_for_eachDan Carpenter1-4/+4
2013-10-14netfilter: nf_tables: add compatibility layer for x_tablesPablo Neira Ayuso1-0/+768
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-03 14:24:56 +0000