summaryrefslogtreecommitdiffstats
path: root/kernel
Commit message (Expand)AuthorAgeFilesLines
* ipset 7.16 releasedv7.16Jozsef Kadlecsik2022-11-211-0/+21
* netfilter: ipset: restore allowing 64 clashing elements in hash:net,ifaceJozsef Kadlecsik2022-11-211-1/+1
* netfilter: ipset: Add support for new bitmask parameterVishwanath Pai2022-11-206-26/+126
* netfilter: ipset: regression in ip_set_hash_ip.cVishwanath Pai2022-11-071-5/+3
* netfilter: move from strlcpy with unused retval to strscpyWolfram Sang2022-11-071-2/+2
* compatibility: handle unsafe_memcpy()Jozsef Kadlecsik2022-11-071-0/+6
* netlink: Bounds-check struct nlmsgerr creationKees Cook2022-11-071-3/+4
* compatibility: move to skb_protocol in the code from tc_skb_protocolJozsef Kadlecsik2022-11-072-6/+4
* sched: consistently handle layer3 header accesses in the presence of VLANsToke Høiland-Jørgensen2022-11-071-1/+1
* treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500Thomas Gleixner2022-11-071-4/+1
* headers: Remove some left-over license text in include/uapi/linux/netfilter/Christophe JAILLET2022-11-071-4/+0
* netfilter: ipset: enforce documented limit to prevent allocating huge memoryJozsef Kadlecsik2022-11-071-24/+6
* netfilter: ipset: Fix oversized kvmalloc() callsJozsef Kadlecsik2022-10-171-2/+2
* ipset 7.15 releasedv7.15Jozsef Kadlecsik2021-08-041-0/+4
* netfilter: ipset: Fix maximal range check in hash_ipportnet4_uadt()Nathan Chancellor2021-08-031-3/+3
* ipset 7.14 releasedv7.14Jozsef Kadlecsik2021-07-281-0/+3
* 64bit division isn't allowed on 32bit, replace it with shiftJozsef Kadlecsik2021-07-281-1/+2
* ipset 7.13 releasedv7.13Jozsef Kadlecsik2021-07-271-0/+3
* Limit the maximal range of consecutive elements to add/delete fixJozsef Kadlecsik2021-07-1610-19/+70
* ipset 7.12 releasedv7.12Jozsef Kadlecsik2021-07-141-0/+9
* Limit the maximal range of consecutive elements to add/deleteJozsef Kadlecsik2021-07-1410-0/+29
* Backport "netfilter: use nfnetlink_unicast()"Jozsef Kadlecsik2021-06-262-40/+33
* Backport "netfilter: nfnetlink: consolidate callback type"Jozsef Kadlecsik2021-06-262-0/+23
* Backport "netfilter: nfnetlink: add struct nfnl_info and pass it to callbacks"Jozsef Kadlecsik2021-06-262-62/+99
* Backport "netfilter: add helper function to set up the nfnetlink header and u...Jozsef Kadlecsik2021-06-262-14/+33
* ipset 7.10 releasedv7.10Jozsef Kadlecsik2020-12-201-0/+12
* Fix patch "Handle false warning from -Wstringop-overflow"Jozsef Kadlecsik2020-12-201-1/+1
* Backward compatibility: handle renaming nla_strlcpy to nla_strscpyJozsef Kadlecsik2020-12-201-0/+5
* treewide: rename nla_strlcpy to nla_strscpy.Francis Laniel2020-12-201-2/+2
* netfilter: ipset: fix shift-out-of-bounds in htable_bits()Vasily Averin2020-12-201-19/+5
* netfilter: ipset: fixes possible oops in mtype_resizeVasily Averin2020-12-201-9/+17
* Handle false warning from -Wstringop-overflowJozsef Kadlecsik2020-12-141-1/+1
* Backward compatibility: handle missing strscpy with a wrapper of strlcpy.Jozsef Kadlecsik2020-12-141-1/+6
* Move compiler specific compatibility support to separated fileJozsef Kadlecsik2020-12-074-14/+17
* ipset 7.8 releasedv7.8Jozsef Kadlecsik2020-11-191-0/+10
* Complete backward compatibility fix for package copy of <linux/jhash.h>Jozsef Kadlecsik2020-11-191-2/+0
* Compatibility: check for kvzalloc() and GFP_KERNEL_ACCOUNTJozsef Kadlecsik2020-11-191-1/+30
* netfilter: ipset: enable memory accounting for ipset allocationsVasily Averin2020-11-191-16/+1
* netfilter: ipset: prevent uninit-value in hash_ip6_addEric Dumazet2020-11-192-2/+9
* Compatibility: use skb_policy() from if_vlan.h if availableJozsef Kadlecsik2020-11-191-0/+5
* Compatibility: Check for the fourth arg of list_for_each_entry_rcu()Jozsef Kadlecsik2020-11-192-2/+11
* Backward compatibility fix for the package copy of <linux/jhash.h>Jozsef Kadlecsik2020-11-081-0/+1
* ipset 7.7 releasedv7.7Jozsef Kadlecsik2020-09-221-0/+22
* Expose the initval hash parameter to userspaceJozsef Kadlecsik2020-09-2114-17/+34
* Add bucketsize parameter to all hash typesJozsef Kadlecsik2020-09-2116-40/+79
* Use fallthrough pseudo-keyword in the package copy of <linux/jhash.h> tooJozsef Kadlecsik2020-09-201-13/+13
* Support the -exist flag with the destroy commandJozsef Kadlecsik2020-09-201-1/+3
* netfilter: Use fallthrough pseudo-keywordGustavo A. R. Silva2020-09-202-1/+13
* netfilter: Replace zero-length array with flexible-array memberGustavo A. R. Silva2020-09-205-6/+6
* netfilter: ipset: call ip_set_free() instead of kfree()Eric Dumazet2020-09-204-5/+5