summaryrefslogtreecommitdiff
path: root/net/netfilter/nft_exthdr.c
AgeCommit message (Expand)Author
2023-12-06netfilter: nf_tables: fix 'exist' matching on bigendian archesFlorian Westphal
2023-09-06netfilter: nftables: exthdr: fix 4-byte stack OOB writeFlorian Westphal
2023-08-30netfilter: nft_exthdr: Fix non-linear header modificationXiao Liang
2023-06-26netfilter: nf_tables: limit allowed range via nla_policyFlorian Westphal
2023-05-18netfilter: nft_exthdr: add boolean DCCP option matchingJeremy Sowden
2022-11-17sctp: move SCTP_PAD4 and SCTP_TRUNC4 to linux/sctp.hXin Long
2022-11-15netfilter: nf_tables: Extend nft_expr_ops::dump callback parametersPhil Sutter
2022-07-11netfilter: nf_tables: use correct integer typesFlorian Westphal
2022-03-20netfilter: nft_exthdr: add reduce supportFlorian Westphal
2022-02-10Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski
2022-02-04netfilter: exthdr: add support for tcp option removalFlorian Westphal
2022-02-04netfilter: nft_payload: don't allow th access for fragmentsFlorian Westphal
2021-12-08netfilter: nft_exthdr: break evaluation if setting TCP option failsPablo Neira Ayuso
2021-06-29Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netJakub Kicinski
2021-06-16netfilter: nft_extdhr: Drop pointless check of tprot_setPhil Sutter
2021-06-16netfilter: nft_exthdr: Search chunks in SCTP packets onlyPhil Sutter
2021-06-16netfilter: nft_exthdr: check for IPv6 packet before further processingPablo Neira Ayuso
2021-06-09netfilter: nft_exthdr: Fix for unsafe packet data readPhil Sutter
2021-05-29netfilter: nf_tables: add and use nft_thoff helperFlorian Westphal
2021-05-28netfilter: nft_exthdr: Support SCTP chunksPhil Sutter
2021-01-27netfilter: nftables: add nft_parse_register_store() and use itPablo Neira Ayuso
2021-01-27netfilter: nftables: add nft_parse_register_load() and use itPablo Neira Ayuso
2020-08-10netfilter: nf_tables: nft_exthdr: the presence return value should be little-...Stephen Suryaputra
2020-03-30netfilter: nft_exthdr: fix endianness of tcp option castSergey Marinkevich
2019-06-25Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-nextPablo Neira Ayuso
2019-06-22Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/netDavid S. Miller
2019-06-21netfilter: nf_tables: add support for matching IPv4 optionsStephen Suryaputra
2019-06-19treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500Thomas Gleixner
2019-05-31netfilter: nf_tables: prefer skb_ensure_writableFlorian Westphal
2018-04-27netfilter: nf_tables: merge exthdr expression into nft coreFlorian Westphal
2017-12-11netfilter: exthdr: add missign attributes to policyFlorian Westphal
2017-08-28netfilter: fix a few (harmless) sparse warningsFlorian Westphal
2017-08-19netfilter: exthdr: tcp option set supportFlorian Westphal
2017-08-19netfilter: exthdr: split netlink dump functionFlorian Westphal
2017-08-19netfilter: exthdr: factor out tcp option accessFlorian Westphal
2017-04-07netfilter: Remove exceptional & on function nameArushi Singhal
2017-03-06netfilter: nft_exthdr: Allow checking TCP option presence, tooPhil Sutter
2017-02-08netfilter: nft_exthdr: add TCP option matchingManuel Messner
2017-02-08netfilter: nft_exthdr: Add support for existence checkPhil Sutter
2016-10-17netfilter: nft_exthdr: fix error handling in nft_exthdr_init()Dan Carpenter
2016-09-23netfilter: nf_tables: validate maximum value of u32 netlink attributesLaura Garcia Liebana
2016-08-10netfilter: nft_exthdr: Add size check on u8 nft_exthdr attributesLaura Garcia Liebana
2015-04-13netfilter: nf_tables: switch registers to 32 bit addressingPatrick McHardy
2015-04-13netfilter: nf_tables: add register parsing/dumping helpersPatrick McHardy
2015-04-13netfilter: nf_tables: convert expressions to u32 register pointersPatrick McHardy
2015-04-13netfilter: nf_tables: get rid of NFT_REG_VERDICT usagePatrick McHardy
2015-04-13netfilter: nf_tables: kill nft_validate_output_register()Patrick McHardy
2015-04-13netfilter: nf_tables: rename nft_validate_data_load()Patrick McHardy
2015-04-13netfilter: nf_tables: validate len in nft_validate_data_load()Patrick McHardy
2013-12-20netfilter: nft_exthdr: call ipv6_find_hdr() with explicitly initialized offsetDaniel Borkmann