aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter/nft_exthdr.c
AgeCommit message (Expand)AuthorFilesLines
2023-12-06netfilter: nf_tables: fix 'exist' matching on bigendian archesFlorian Westphal1-2/+2
2023-09-06netfilter: nftables: exthdr: fix 4-byte stack OOB writeFlorian Westphal1-8/+14
2023-08-30netfilter: nft_exthdr: Fix non-linear header modificationXiao Liang1-12/+8
2023-06-26netfilter: nf_tables: limit allowed range via nla_policyFlorian Westphal1-2/+2
2023-05-18netfilter: nft_exthdr: add boolean DCCP option matchingJeremy Sowden1-0/+106
2022-11-17sctp: move SCTP_PAD4 and SCTP_TRUNC4 to linux/sctp.hXin Long1-1/+0
2022-11-15netfilter: nf_tables: Extend nft_expr_ops::dump callback parametersPhil Sutter1-3/+6
2022-07-11netfilter: nf_tables: use correct integer typesFlorian Westphal1-5/+5
2022-03-20netfilter: nft_exthdr: add reduce supportFlorian Westphal1-0/+33
2022-02-10Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-1/+1
2022-02-04netfilter: exthdr: add support for tcp option removalFlorian Westphal1-1/+95
2022-02-04netfilter: nft_payload: don't allow th access for fragmentsFlorian Westphal1-1/+1
2021-12-08netfilter: nft_exthdr: break evaluation if setting TCP option failsPablo Neira Ayuso1-4/+7
2021-06-29Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-0/+3
2021-06-16netfilter: nft_extdhr: Drop pointless check of tprot_setPhil Sutter1-1/+1
2021-06-16netfilter: nft_exthdr: Search chunks in SCTP packets onlyPhil Sutter1-1/+4
2021-06-16netfilter: nft_exthdr: check for IPv6 packet before further processingPablo Neira Ayuso1-0/+3
2021-06-09netfilter: nft_exthdr: Fix for unsafe packet data readPhil Sutter1-1/+3
2021-05-29netfilter: nf_tables: add and use nft_thoff helperFlorian Westphal1-4/+4
2021-05-28netfilter: nft_exthdr: Support SCTP chunksPhil Sutter1-0/+51
2021-01-27netfilter: nftables: add nft_parse_register_store() and use itPablo Neira Ayuso1-4/+4
2021-01-27netfilter: nftables: add nft_parse_register_load() and use itPablo Neira Ayuso1-3/+3
2020-08-10netfilter: nf_tables: nft_exthdr: the presence return value should be little-...Stephen Suryaputra1-2/+2
2020-03-30netfilter: nft_exthdr: fix endianness of tcp option castSergey Marinkevich1-5/+3
2019-06-25Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextPablo Neira Ayuso1-4/+1
2019-06-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-4/+1
2019-06-21netfilter: nf_tables: add support for matching IPv4 optionsStephen Suryaputra1-0/+133
2019-06-19treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500Thomas Gleixner1-4/+1
2019-05-31netfilter: nf_tables: prefer skb_ensure_writableFlorian Westphal1-1/+2
2018-04-27netfilter: nf_tables: merge exthdr expression into nft coreFlorian Westphal1-21/+2
2017-12-11netfilter: exthdr: add missign attributes to policyFlorian Westphal1-0/+2
2017-08-28netfilter: fix a few (harmless) sparse warningsFlorian Westphal1-1/+1
2017-08-19netfilter: exthdr: tcp option set supportFlorian Westphal1-2/+162
2017-08-19netfilter: exthdr: split netlink dump functionFlorian Westphal1-5/+11
2017-08-19netfilter: exthdr: factor out tcp option accessFlorian Westphal1-12/+21
2017-04-07netfilter: Remove exceptional & on function nameArushi Singhal1-1/+1
2017-03-06netfilter: nft_exthdr: Allow checking TCP option presence, tooPhil Sutter1-3/+10
2017-02-08netfilter: nft_exthdr: add TCP option matchingManuel Messner1-13/+106
2017-02-08netfilter: nft_exthdr: Add support for existence checkPhil Sutter1-2/+20
2016-10-17netfilter: nft_exthdr: fix error handling in nft_exthdr_init()Dan Carpenter1-1/+2
2016-09-23netfilter: nf_tables: validate maximum value of u32 netlink attributesLaura Garcia Liebana1-5/+7
2016-08-10netfilter: nft_exthdr: Add size check on u8 nft_exthdr attributesLaura Garcia Liebana1-2/+9
2015-04-13netfilter: nf_tables: switch registers to 32 bit addressingPatrick McHardy1-1/+2
2015-04-13netfilter: nf_tables: add register parsing/dumping helpersPatrick McHardy1-2/+2
2015-04-13netfilter: nf_tables: convert expressions to u32 register pointersPatrick McHardy1-2/+2
2015-04-13netfilter: nf_tables: get rid of NFT_REG_VERDICT usagePatrick McHardy1-3/+3
2015-04-13netfilter: nf_tables: kill nft_validate_output_register()Patrick McHardy1-5/+1
2015-04-13netfilter: nf_tables: rename nft_validate_data_load()Patrick McHardy1-2/+2
2015-04-13netfilter: nf_tables: validate len in nft_validate_data_load()Patrick McHardy1-4/+2
2013-12-20netfilter: nft_exthdr: call ipv6_find_hdr() with explicitly initialized offsetDaniel Borkmann1-1/+1
2013-10-14netfilter: nf_tables: expression ops overloadingPatrick McHardy1-5/+11
2013-10-14netfilter: add nftablesPatrick McHardy1-0/+127