aboutsummaryrefslogtreecommitdiffstats
path: root/net/bridge/netfilter/ebtables.c
AgeCommit message (Expand)AuthorFilesLines
2024-04-04netfilter: validate user input for expected lengthEric Dumazet1-0/+6
2023-11-08netfilter: add missing module descriptionsFlorian Westphal1-0/+1
2023-08-22netfilter: ebtables: fix fortify warnings in size_entry_mwt()GONG, Ruiqi1-2/+1
2023-02-22netfilter: ebtables: fix table blob use-after-freeFlorian Westphal1-1/+1
2022-09-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-1/+3
2022-09-20netfilter: ebtables: fix memory leak when blob is malformedFlorian Westphal1-1/+3
2022-08-25Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-7/+1
2022-08-23netfilter: ebtables: reject blobs that don't provide all entry pointsFlorian Westphal1-7/+1
2022-08-22bridge: move from strlcpy with unused retval to strscpyWolfram Sang1-1/+1
2021-11-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-3/+4
2021-10-22netfilter: ebtables: use array_size() helper in copy_{from,to}_user()Gustavo A. R. Silva1-3/+4
2021-10-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netDavid S. Miller1-1/+3
2021-10-18netfilter: ebtables: allocate chainstack on CPU local nodesDavidlohr Bueso1-1/+3
2021-10-14netfilter: ebtables: allow use of ebt_do_table as hookfnFlorian Westphal1-3/+3
2021-08-02netfilter: ebtables: do not hook tables by defaultFlorian Westphal1-14/+95
2021-04-26netfilter: allow to turn off xtables compat layerFlorian Westphal1-6/+6
2021-04-26netfilter: ebtables: remove the 3 ebtables pointers from struct netFlorian Westphal1-10/+32
2021-04-17Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski1-3/+28
2021-04-10netfilter: bridge: add pre_exit hooks for ebtable unregistrationFlorian Westphal1-3/+27
2021-04-06netfilter: ebtables: use net_generic infraFlorian Westphal1-5/+34
2020-08-14netfilter: ebtables: reject bogus getopt len valueFlorian Westphal1-0/+4
2020-08-05Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-nextLinus Torvalds1-137/+115
2020-08-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-1/+1
2020-07-24netfilter: switch nf_setsockopt to sockptr_tChristoph Hellwig1-20/+17
2020-07-24netfilter: remove the unused user argument to do_update_countersChristoph Hellwig1-5/+4
2020-07-22netfilter: Use fallthrough pseudo-keywordGustavo A. R. Silva1-1/+1
2020-07-19netfilter/ebtables: clean up compat {get, set}sockopt handlingChristoph Hellwig1-116/+98
2020-06-29audit: add gfp parameter to audit_log_nfcfgRichard Guy Briggs1-3/+3
2020-06-02Merge tag 'audit-pr-20200601' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-8/+6
2020-06-02mm: remove the pgprot argument to __vmallocChristoph Hellwig1-4/+2
2020-04-28netfilter: add audit table unregister actionsRichard Guy Briggs1-0/+2
2020-04-28audit: tidy and extend netfilter_cfg x_tablesRichard Guy Briggs1-8/+4
2020-03-15netfilter: Replace zero-length array with flexible-array memberGustavo A. R. Silva1-1/+1
2019-12-20netfilter: ebtables: compat: reject all padding in matches/watchersFlorian Westphal1-17/+16
2019-08-19netfilter: ebtables: Fix argument order to ADD_COUNTERTodd Seidelmann1-4/+4
2019-07-30netfilter: ebtables: also count base chain policiesFlorian Westphal1-11/+17
2019-07-21netfilter: ebtables: fix a memory leak bug in compatWenwen Wang1-1/+3
2019-05-30treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152Thomas Gleixner1-5/+1
2019-05-13Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller1-1/+3
2019-05-09netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last ruleFlorian Westphal1-1/+3
2019-04-25Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-1/+2
2019-04-22netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ONFlorian Westphal1-1/+2
2019-04-12bridge: broute: make broute a real ebtables tableFlorian Westphal1-6/+1
2019-03-01netfilter: convert the proto argument from u8 to u16Li RongQing1-3/+3
2019-02-27netfilter: ebtables: remove BUGPRINT messagesFlorian Westphal1-92/+39
2019-01-28netfilter: ebtables: compat: un-break 32bit setsockopt when no rules are presentFlorian Westphal1-3/+6
2019-01-11netfilter: ebtables: account ebt_table_info to kmemcgShakeel Butt1-2/+4
2018-06-16Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netLinus Torvalds1-5/+20
2018-06-12treewide: Use array_size() in vmalloc()Kees Cook1-5/+6
2018-06-11Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nfDavid S. Miller1-5/+20
2018-06-08netfilter: x_tables: initialise match/target check parameter structFlorian Westphal1-0/+2
2018-06-06Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds1-34/+29
2018-06-06Merge tag 'audit-pr-20180605' of git://git.kernel.org/pub/scm/linux/kernel/gi...Linus Torvalds1-1/+1
2018-06-06netfilter: ebtables: reject non-bridge targetsFlorian Westphal1-0/+13
2018-06-04netfilter: ebtables: fix compat entry paddingAlin Nastac1-5/+5
2018-06-03Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-1/+2
2018-05-17netfilter: ebtables: handle string from userspace with carePaolo Abeni1-1/+2
2018-05-14audit: use inline function to get audit contextRichard Guy Briggs1-1/+1
2018-05-06Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-34/+29
2018-04-24netfilter: ebtables: add ebt_get_target and ebt_get_target_cTaehee Yoo1-9/+13
2018-04-24netfilter: ebtables: remove EBT_MATCH and EBT_NOMATCHTaehee Yoo1-1/+1
2018-04-24netfilter: ebtables: add ebt_free_table_info functionTaehee Yoo1-24/+15
2018-04-09netfilter: ebtables: don't attempt to allocate 0-sized compat arrayFlorian Westphal1-5/+6
2018-03-30Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-31/+43
2018-03-30netfilter: ebtables: Add support for specifying match revisionBernie Harris1-18/+29
2018-03-20netfilter: ebtables: use ADD_COUNTER macroTaehee Yoo1-11/+6
2018-03-11netfilter: ebtables: fix erroneous reject of last ruleFlorian Westphal1-1/+5
2018-03-05netfilter: compat: prepare xt_compat_init_offsets to return errorsFlorian Westphal1-2/+8
2018-02-25netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsetsFlorian Westphal1-1/+12
2018-02-25netfilter: ebtables: convert BUG_ONs to WARN_ONsFlorian Westphal1-9/+18
2018-01-19netfilter: remove messages print and boot/module load timePablo Neira Ayuso1-2/+0
2017-11-08Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller1-2/+1
2017-11-06netfilter: ebtables: clean up initialization of bufColin Ian King1-2/+1
2017-09-29netfilter: ebtables: fix race condition in frame_filter_net_init()Artem Savkov1-8/+9
2017-09-04net: Remove CONFIG_NETFILTER_DEBUG and _ASSERT() macros.Varsha Rao1-12/+8
2017-08-19netfilter: use audit_log()Geliang Tang1-9/+4
2017-05-15netfilter: xtables: zero padding in data_to_userWillem de Bruijn1-3/+6
2017-04-26ebtables: remove nf_hook_register usageFlorian Westphal1-23/+38
2017-04-07netfilter: Remove unnecessary cast on void pointersimran singhal1-1/+1
2017-01-09ebtables: use match, target and data copy_to_user helpersWillem de Bruijn1-31/+47
2016-12-24Replace <asm/uaccess.h> with <linux/uaccess.h> globallyLinus Torvalds1-1/+1
2016-11-03netfilter: x_tables: move hook state into xt_action_param structurePablo Neira Ayuso1-5/+1
2016-09-25Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/...Pablo Neira Ayuso1-0/+2
2016-09-24netfilter: Remove explicit rcu_read_lock in nf_hook_slowAaron Conole1-1/+1
2016-08-25netfilter: ebtables: put module reference when an incorrect extension is foundSabrina Dubroca1-0/+2
2016-07-03netfilter: Convert FWINV<[foo]> macros and uses to NF_INVFJoe Perches1-13/+14
2016-07-01etherdevice.h & bridge: netfilter: Add and use ether_addr_equal_maskedJoe Perches1-11/+6
2016-04-13netfilter: ebtables: Fix extension lookup with identical namePhil Sutter1-1/+5
2016-03-28netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_EN...Pablo Neira Ayuso1-0/+4
2015-11-23netfilter-bridge: layout of if statementsIan Morris1-4/+4
2015-11-23netfilter-bridge: brace placementIan Morris1-2/+1
2015-11-23netfilter-bridge: use netdev style commentsIan Morris1-40/+44
2015-11-23netfilter-bridge: Cleanse indentationIan Morris1-22/+22
2015-09-18netfilter: x_tables: Pass struct net in xt_action_paramEric W. Biederman1-0/+1
2015-09-18netfilter: ebtables: Simplify the arguments to ebt_do_tableEric W. Biederman1-6/+7
2015-08-28netfilter: reduce sparse warningsFlorian Westphal1-1/+1
2015-06-24Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextLinus Torvalds1-1/+1
2015-06-23Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jik...Linus Torvalds1-1/+1
2015-06-01Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-4/+0
2015-06-01Revert "netfilter: ensure number of counters is >0 in do_replace()"Bernhard Thaler1-4/+0
2015-05-26netfilter: ebtables: fix comment grammarGeert Uytterhoeven1-1/+1
2015-05-23Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller1-0/+4
2015-05-20netfilter: ensure number of counters is >0 in do_replace()Dave Jones1-0/+4
2015-05-05ebtables: Use eth_proto_is_802_3Alexander Duyck1-1/+1
2015-01-13net: rename vlan_tx_* helpers since "tx" is misleading thereJiri Pirko1-1/+1
2014-09-09netfilter: ebtables: create audit records for replacesNicolas Dichtel1-0/+15
2014-08-08netfilter: don't use mutex_lock_interruptible()Pablo Neira Ayuso1-8/+2
2014-04-05netfilter: Can't fail and free after table replacementThomas Graf1-3/+2
2013-12-19bridge: change the position of '{' to the pre linetanxiaojun1-2/+1
2013-12-19bridge: add space before '(/{', after ',', etc.tanxiaojun1-6/+6
2013-12-19bridge: remove unnecessary parenthesestanxiaojun1-1/+1
2013-05-23bridge: netfilter: using strlcpy() instead of strncpy()Chen Gang1-3/+3
2013-03-28net: add ETH_P_802_3_MINSimon Horman1-1/+1
2013-02-04netns: ebtable: allow unprivileged users to operate ebtablesGao feng1-10/+14
2012-03-06netfilter: bridge: fix wrong pointer dereferencePablo Neira Ayuso1-1/+1
2012-03-06netfilter: ebtables: fix wrong name length while copying to user-spaceSantosh Nayak1-3/+13
2012-02-25netfilter: bridge: fix module autoload in compat caseFlorian Westphal1-8/+2
2011-08-11net/bridge/netfilter/ebtables.c: use available error handling codeJulia Lawall1-1/+2
2011-05-26netfilter: Fix several warnings in compat_mtw_from_user().David Miller1-2/+4
2011-05-10netfilter: ebtables: only call xt_compat_add_offset once per ruleFlorian Westphal1-52/+9
2011-05-10netfilter: fix ebtables compat supportEric Dumazet1-1/+2
2011-02-14bridge: netfilter: fix information leakVasiliy Kulikov1-0/+2
2011-01-13netfilter: x_table: speedup compat operationsEric Dumazet1-0/+1
2011-01-03net/bridge: fix trivial sparse errorsTomas Winkler1-1/+1
2010-11-15bridge: fix RCU races with bridge portstephen hemminger1-6/+5
2010-10-21ebtables: Allow filtering of hardware accelerated vlan frames.Jesse Gross1-4/+11
2010-06-15bridge: use rx_handler_data pointer to store net_bridge_port pointerJiri Pirko1-4/+7
2010-05-11netfilter: xtables: change hotdrop pointer to direct modificationJan Engelhardt1-3/+2
2010-05-11netfilter: xtables: combine struct xt_match_param and xt_target_paramJan Engelhardt1-15/+15
2010-04-20Merge branch 'master' of /repos/git/net-next-2.6Patrick McHardy1-0/+1
2010-03-30include cleanup: Update gfp.h and slab.h includes to prepare for breaking imp...Tejun Heo1-0/+1
2010-03-25netfilter: xtables: consolidate code into xt_request_find_matchJan Engelhardt1-4/+1
2010-03-25netfilter: xtables: make use of xt_request_find_targetJan Engelhardt1-11/+2
2010-03-25netfilter: xt extensions: use pr_<level> (2)Jan Engelhardt1-3/+2
2010-02-16netfilter: ebtables: try native set/getsockopt handlers, tooFlorian Westphal1-10/+24
2010-02-16netfilter: ebtables: add CONFIG_COMPAT supportFlorian Westphal1-1/+886
2010-02-16netfilter: ebtables: split update_counters into two functionsFlorian Westphal1-16/+26
2010-02-16netfilter: ebtables: split copy_everything_to_user into two functionsFlorian Westphal1-32/+38
2010-02-16netfilter: ebtables: split do_replace into two functionsFlorian Westphal1-65/+71
2010-02-15netfilter: ebtables: abort if next_offset is too smallFlorian Westphal1-0/+2
2010-02-15netfilter: xtables: add const qualifiersJan Engelhardt1-27/+32
2010-02-10Merge branch 'master' of /repos/git/net-next-2.6Patrick McHardy1-0/+6
2010-02-03netfilter: add struct net * to target parametersPatrick McHardy1-4/+6
2010-01-18netfilter: xtables: add struct xt_mtdtor_param::netAlexey Dobriyan1-9/+10
2010-01-18netfilter: xtables: add struct xt_mtchk_param::netAlexey Dobriyan1-5/+9
2010-01-08netfilter: ebtables: enforce CAP_NET_ADMINFlorian Westphal1-0/+6
2009-08-24netfilter: xtables: mark initial tables constantJan Engelhardt1-6/+7
2009-06-04netfilter: x_tables: added hook number into match extension parameter structure.Evgeniy Polyakov1-1/+1
2009-05-08netfilter: xtables: consolidate open-coded logicJan Engelhardt1-6/+10
2009-01-12netfilter 05/09: ebtables: fix inversion in match codeJan Engelhardt1-1/+1
2009-01-11net/bridge/netfilter: move a dereference below a NULL testJulia Lawall1-1/+2
2008-11-04netfilter: netns ebtables: more cleanup during ebt_unregister_table()Alexey Dobriyan1-0/+4
2008-11-04netfilter: netns ebtables: part 2Alexey Dobriyan1-6/+17
2008-11-04netfilter: netns ebtables: part 1Alexey Dobriyan1-13/+14
2008-10-16net: Remove CONFIG_KMOD from net/ (towards removing CONFIG_KMOD entirely)Johannes Berg1-12/+3
2008-10-08netfilter: xtables: provide invoked family value to extensionsJan Engelhardt1-3/+8
2008-10-08netfilter: xtables: move extension arguments into compound structure (6/6)Jan Engelhardt1-6/+13
2008-10-08netfilter: xtables: move extension arguments into compound structure (5/6)Jan Engelhardt1-12/+16
2008-10-08netfilter: xtables: move extension arguments into compound structure (4/6)Jan Engelhardt1-11/+16
2008-10-08netfilter: xtables: move extension arguments into compound structure (3/6)Jan Engelhardt1-8/+12
2008-10-08netfilter: xtables: move extension arguments into compound structure (2/6)Jan Engelhardt1-6/+13
2008-10-08netfilter: xtables: move extension arguments into compound structure (1/6)Jan Engelhardt1-6/+10
2008-10-08netfilter: xtables: do centralized checkentry call (1/2)Jan Engelhardt1-18/+6
2008-10-08netfilter: ebtables: fix one wrong return valueJan Engelhardt1-1/+1
2008-10-08netfilter: remove unused Ebtables functionsJan Engelhardt1-108/+0
2008-10-08netfilter: implement hotdrop for EbtablesJan Engelhardt1-3/+10
2008-10-08netfilter: move Ebtables to use XtablesJan Engelhardt1-106/+67
2008-10-08netfilter: change Ebtables function signatures to match Xtables'sJan Engelhardt1-16/+14
2008-10-08netfilter: add dummy members to Ebtables code to ease transition to XtablesJan Engelhardt1-9/+49
2008-10-08netfilter: change return types of check functions for Ebtables extensionsJan Engelhardt1-3/+3
2008-10-08netfilter: ebtables: do centralized size checkingJan Engelhardt1-5/+38
2008-01-28[BRIDGE]: Remove unused include of a header file in ebtables.cRami Rosen1-2/+0
2007-10-19Convert files to UTF-8 and some cleanupsJan Engelhardt1-1/+1
2007-10-15[NETFILTER]: Replace sk_buff ** with sk_buff *Herbert Xu1-6/+6
2007-09-11[NETFILTER]: Fix/improve deadlock condition on module removal netfilterNeil Horman1-0/+1
2007-07-14[NETFILTER]: Lower *tables printk severityPatrick McHardy1-2/+2
2007-02-20[PATCH] Convert highest_possible_processor_id to nr_cpu_idsChristoph Lameter1-6/+3
2007-02-14[PATCH] remove many unneeded #includes of sched.hTim Schmielau1-1/+0
2007-02-10[NET] BRIDGE: Fix whitespace errors.YOSHIFUJI Hideaki1-8/+8
2007-01-04[NETFILTER]: ebtables: don't compute gap before checking struct typeChuck Ebbert1-1/+2
2006-12-02[EBTABLES]: Split ebt_replace into user and kernel variants, annotate.Al Viro1-9/+10
2006-12-02[EBTABLES]: Clean ebt_register_table() up.Al Viro1-12/+21
2006-12-02[EBTABLES]: Move calls of ebt_verify_pointers() upstream.Al Viro1-9/+11
2006-12-02[EBTABLES]: ebt_check_entry() doesn't need valid_hooksAl Viro1-4/+3
2006-12-02[EBTABLES]: Clean ebt_get_udc_positions() up.Al Viro1-6/+2
2006-12-02[EBTABLES]: Switch ebt_check_entry_size_and_hooks() to use of newinfo->hook_e...Al Viro1-10/+6
2006-12-02[EBTABLES]: translate_table(): switch direct uses of repl->hook_info to newinfoAl Viro1-5/+5
2006-12-02[EBTABLES]: Move more stuff into ebt_verify_pointers().Al Viro1-19/+19
2006-12-02[EBTABLES]: Pull the loop doing __ebt_verify_pointers() into a separate funct...Al Viro1-37/+41
2006-12-02[EBTABLES]: Split ebt_check_entry_size_and_hooksAl Viro1-24/+49
2006-12-02[EBTABLES]: Prevent wraparounds in checks for entry components' sizes.Al Viro1-8/+9
2006-12-02[EBTABLES]: Deal with the worst-case behaviour in loop checks.Al Viro1-1/+3
2006-12-02[EBTABLES]: Verify that ebt_entries have zero ->distinguisher.Al Viro1-5/+5
2006-12-02[EBTABLES]: Fix wraparounds in ebt_entries verification.Al Viro1-7/+16
2006-11-01[NETFILTER]: silence a warning in ebtablesMeelis Roos1-1/+1
2006-09-22[NETFILTER]: kill listhelp.hPatrick McHardy1-31/+45
2006-09-22[NETFILTER]: Make unused signal code go away so nobody copies its brokennessAlan Cox1-21/+0
2006-04-20[EBTABLES]: Clean up vmalloc usage in net/bridge/netfilter/ebtables.cJayachandran C1-13/+7
2006-04-11[BRIDGE] ebtables: fix allocation in net/bridge/netfilter/ebtables.cJayachandran C1-3/+3
2006-04-11[PATCH] for_each_possible_cpu: network codesKAMEZAWA Hiroyuki1-6/+6