Show patches with: none      |   30102 patches
« 1 2 ... 8 9 10301 302 »
Patch Series A/F/R/T S/W/F Date Submitter Delegate State
[libnetfilter_queue] src: Fix IPv6 Fragment Header processing [libnetfilter_queue] src: Fix IPv6 Fragment Header processing - 1 - - --- 2023-10-08 Duncan Roe pablo Accepted
[nft,3/3] tests/shell: add "-S|--setup-host" option to set sysctl for rootless tests [nft,1/3] tests/shell: mount all of "/var/run" in "test-wrapper.sh" - - - - --- 2023-10-06 Thomas Haller pablo Accepted
[nft,2/3] tests/shell: preserve result directory with NFT_TEST_FAIL_ON_SKIP [nft,1/3] tests/shell: mount all of "/var/run" in "test-wrapper.sh" - - - - --- 2023-10-06 Thomas Haller pablo Accepted
[nft,1/3] tests/shell: mount all of "/var/run" in "test-wrapper.sh" [nft,1/3] tests/shell: mount all of "/var/run" in "test-wrapper.sh" - - - - --- 2023-10-06 Thomas Haller pablo Accepted
[nf-next] netfilter: conntrack: prefer tcp_error_log to pr_debug [nf-next] netfilter: conntrack: prefer tcp_error_log to pr_debug - - - - --- 2023-10-06 Florian Westphal Accepted
[nf-next] netfilter: conntrack: simplify nf_conntrack_alter_reply [nf-next] netfilter: conntrack: simplify nf_conntrack_alter_reply - - - - --- 2023-10-06 Florian Westphal Accepted
[nf] netfilter: nfnetlink_log: silence bogus compiler warning [nf] netfilter: nfnetlink_log: silence bogus compiler warning - - - - --- 2023-10-05 Florian Westphal Accepted
[nf] netfilter: nf_tables: do not remove elements if set backend implements .abort [nf] netfilter: nf_tables: do not remove elements if set backend implements .abort - 1 - - --- 2023-10-04 Pablo Neira Ayuso Accepted
netfilter: nf_tables: Annotate struct nft_pipapo_match with __counted_by netfilter: nf_tables: Annotate struct nft_pipapo_match with __counted_by - - 1 - --- 2023-10-03 Kees Cook Accepted
[PATCHv2,nf,2/2] selftests: netfilter: test for sctp collision processing in nf_conntrack netfilter: handle the sctp collision properly and add selftest - - - - --- 2023-10-03 Xin Long Accepted
[PATCHv2,nf,1/2] netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp netfilter: handle the sctp collision properly and add selftest - 1 - - --- 2023-10-03 Xin Long Accepted
[nf,v2] netfilter: nf_tables: do not refresh timeout when resetting element [nf,v2] netfilter: nf_tables: do not refresh timeout when resetting element - 1 - - --- 2023-10-02 Pablo Neira Ayuso Accepted
[nf-next,5/5] netfilter: nf_tables: Don't allocate nft_rule_dump_ctx [nf-next,1/5] netfilter: nf_tables: Always allocate nft_rule_dump_ctx - - - - --- 2023-09-29 Phil Sutter strlen Accepted
[nf-next,4/5] netfilter: nf_tables: Carry s_idx in nft_rule_dump_ctx [nf-next,1/5] netfilter: nf_tables: Always allocate nft_rule_dump_ctx - - - - --- 2023-09-29 Phil Sutter strlen Accepted
[nf-next,3/5] netfilter: nf_tables: Carry reset flag in nft_rule_dump_ctx [nf-next,1/5] netfilter: nf_tables: Always allocate nft_rule_dump_ctx - - - - --- 2023-09-29 Phil Sutter strlen Accepted
[nf-next,2/5] netfilter: nf_tables: Drop pointless memset when dumping rules [nf-next,1/5] netfilter: nf_tables: Always allocate nft_rule_dump_ctx - 1 - - --- 2023-09-29 Phil Sutter strlen Accepted
[nf-next,1/5] netfilter: nf_tables: Always allocate nft_rule_dump_ctx [nf-next,1/5] netfilter: nf_tables: Always allocate nft_rule_dump_ctx - - - - --- 2023-09-29 Phil Sutter strlen Accepted
[nft] tests: shell: sets/reset_command_0: Fix drop_seconds() [nft] tests: shell: sets/reset_command_0: Fix drop_seconds() - 1 - - --- 2023-09-29 Phil Sutter Accepted
[nft] rule: never merge across non-expr statements [nft] rule: never merge across non-expr statements - - - - --- 2023-09-29 Florian Westphal Accepted
[libnetfilter_conntrack] src: reverse calloc() invocation [libnetfilter_conntrack] src: reverse calloc() invocation - - - - --- 2023-09-29 Pablo Neira Ayuso Accepted
[nft] tests: shell: add vlan match test case [nft] tests: shell: add vlan match test case - - - - --- 2023-09-29 Florian Westphal Accepted
[nf] netfilter: nft_payload: rebuild vlan header on h_proto access [nf] netfilter: nft_payload: rebuild vlan header on h_proto access - 1 - - --- 2023-09-29 Florian Westphal Accepted
[libnetfilter_queue,v3] make the HTML main page available as `man 7 libnetfilter_queue` [libnetfilter_queue,v3] make the HTML main page available as `man 7 libnetfilter_queue` - - - - --- 2023-09-29 Duncan Roe Accepted
[nft] tests: shell: Fix for failing nft-f/sample-ruleset [nft] tests: shell: Fix for failing nft-f/sample-ruleset - 1 - - --- 2023-09-28 Phil Sutter Accepted
[net-next,4/4] netfilter: nf_tables: Utilize NLA_POLICY_NESTED_ARRAY [net-next,1/4] netfilter: nf_nat: undo erroneous tcp edemux lookup after port clash - - - - --- 2023-09-28 Florian Westphal Accepted
[nf] netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure [nf] netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure - - - - --- 2023-09-28 Florian Westphal Accepted
[nft,5/5] datatype: use xmalloc() for allocating datatype in datatype_clone() more various cleanups related to struct datatype - - - - --- 2023-09-27 Thomas Haller pablo Accepted
[nft,1/1] include: include <string.h> in <nft.h> [nft,1/1] include: include <string.h> in <nft.h> - - - - --- 2023-09-27 Thomas Haller Accepted
[nft,v3] tests: shell: fix spurious errors in sets/0036add_set_element_expiration_0 [nft,v3] tests: shell: fix spurious errors in sets/0036add_set_element_expiration_0 - 1 - - --- 2023-09-27 Pablo Neira Ayuso Accepted
[nft,3/3] netlink_linearize: avoid strict-overflow warning in netlink_gen_bitwise() Two fixes to avoid "-Wstrict-overflow" warnings - - - - --- 2023-09-27 Thomas Haller Accepted
[nft,v2,1/1] mergesort: avoid cloning value in expr_msort_cmp() [nft,v2,1/1] mergesort: avoid cloning value in expr_msort_cmp() - - - - --- 2023-09-27 Thomas Haller Accepted
[libnetfilter_queue] Fix typo in examples/nf-queue.c from patch 9a8e4c3 [libnetfilter_queue] Fix typo in examples/nf-queue.c from patch 9a8e4c3 - - - - --- 2023-09-27 Duncan Roe pablo Accepted
[nft] tests: shell: features: Fix table owner flag check [nft] tests: shell: features: Fix table owner flag check - 1 - - --- 2023-09-26 Phil Sutter Accepted
[nft,3/3,v2] netlink_linearize: skip set element expression in map statement key Untitled series #374964 - - - - --- 2023-09-26 Pablo Neira Ayuso Accepted
[nft,2/3] json: expose dynamic flag [nft,1/3] tests: py: add map support 1 1 - - --- 2023-09-26 Pablo Neira Ayuso Accepted
[nft,1/3] tests: py: add map support [nft,1/3] tests: py: add map support - - - - --- 2023-09-26 Pablo Neira Ayuso Accepted
[conntrack-tools] conntrackd: consolidate check for maximum number of channels [conntrack-tools] conntrackd: consolidate check for maximum number of channels - - - - --- 2023-09-25 Pablo Neira Ayuso Accepted
[nf,2/3] netfilter: nf_tables: Deduplicate nft_register_obj audit logs Review nf_tables audit logging 1 1 1 - --- 2023-09-23 Phil Sutter Accepted
[nf,1/3] selftests: netfilter: Extend nft_audit.sh Review nf_tables audit logging - - - - --- 2023-09-23 Phil Sutter Accepted
[nft] tests: shell: skip flowtable-uaf if we lack table owner support [nft] tests: shell: skip flowtable-uaf if we lack table owner support - - - - --- 2023-09-22 Florian Westphal Accepted
[3/3] tests: shell: add feature probe for sctp chunk matching nftables: add feature probes for sctp and multistmt set support - - - - --- 2023-09-21 Florian Westphal Accepted
[2/3] tests: shell: add feature probe for sets with more than one element nftables: add feature probes for sctp and multistmt set support - - - - --- 2023-09-21 Florian Westphal Accepted
[1/3] tests: shell: skip adding catchall elements if unuspported nftables: add feature probes for sctp and multistmt set support - - - - --- 2023-09-21 Florian Westphal Accepted
[nft,9/9] parser_json: Default meter size to zero Misc JSON parser fixes - 1 - - --- 2023-09-20 Phil Sutter Accepted
[nft,8/9] parser_json: Catch nonsense ops in match statement Misc JSON parser fixes - 1 - - --- 2023-09-20 Phil Sutter Accepted
[nft,7/9] parser_json: Wrong check in json_parse_ct_timeout_policy() Misc JSON parser fixes - 1 - - --- 2023-09-20 Phil Sutter Accepted
[nft,6/9] parser_json: Fix synproxy object mss/wscale parsing Misc JSON parser fixes - 1 - - --- 2023-09-20 Phil Sutter Accepted
[nft,5/9] parser_json: Fix limit object burst value parsing Misc JSON parser fixes - 1 - - --- 2023-09-20 Phil Sutter Accepted
[nft,4/9] parser_json: Fix flowtable prio value parsing Misc JSON parser fixes - 1 - - --- 2023-09-20 Phil Sutter Accepted
[nft,3/9] parser_json: Proper ct expectation attribute parsing Misc JSON parser fixes - 1 - - --- 2023-09-20 Phil Sutter Accepted
[nft,2/9] parser_json: Fix typo in json_parse_cmd_add_object() Misc JSON parser fixes - 1 - - --- 2023-09-20 Phil Sutter Accepted
[nft,1/9] parser_json: Catch wrong "reset" payload Misc JSON parser fixes - 1 - - --- 2023-09-20 Phil Sutter Accepted
[nft] datatype: return const pointer from datatype_get() [nft] datatype: return const pointer from datatype_get() - - - - --- 2023-09-20 Thomas Haller Accepted
[nft,v2] icmpv6: Allow matching target address in NS/NA, redirect and MLD [nft,v2] icmpv6: Allow matching target address in NS/NA, redirect and MLD - - - - --- 2023-09-20 Nicolas Cavallari Accepted
[nft,9/9] proto: add missing proto_definitions for PROTO_DESC_GENEVE various cleanups related to enums and struct datatype - 1 - - --- 2023-09-20 Thomas Haller Accepted
[nft,7/9] expression: cleanup expr_ops_by_type() and handle u32 input various cleanups related to enums and struct datatype - - - - --- 2023-09-20 Thomas Haller pablo Accepted
[nft,6/9] netlink: handle invalid etype in set_make_key() various cleanups related to enums and struct datatype - 1 - - --- 2023-09-20 Thomas Haller pablo Accepted
[nft,5/9] payload: use enum icmp_hdr_field_type in payload_may_dependency_kill_icmp() various cleanups related to enums and struct datatype - - - - --- 2023-09-20 Thomas Haller pablo Accepted
[nft,4/9] datatype: use "enum byteorder" instead of int in set_datatype_alloc() various cleanups related to enums and struct datatype - - - - --- 2023-09-20 Thomas Haller pablo Accepted
[nft,2/9] include: fix missing definitions in <cache.h>/<headers.h> various cleanups related to enums and struct datatype - - - - --- 2023-09-20 Thomas Haller Accepted
[nft,1/9] src: fix indentation/whitespace various cleanups related to enums and struct datatype - - - - --- 2023-09-20 Thomas Haller Accepted
build: Fix double-prefix w/ pkgconfig build: Fix double-prefix w/ pkgconfig - 1 - - --- 2023-09-20 Sam James kadlec Accepted
[1/1] netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP [1/1] netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP - 1 - 1 --- 2023-09-19 Jozsef Kadlecsik Accepted
[0/1] ipset patch for nf tree - - - - --- 2023-09-19 Jozsef Kadlecsik Accepted
[nft] datatype: initialize TYPE_CT_EVENTBIT slot in datatype array [nft] datatype: initialize TYPE_CT_EVENTBIT slot in datatype array - 1 - - --- 2023-09-19 Pablo Neira Ayuso Accepted
[nft] datatype: initialize TYPE_CT_LABEL slot in datatype array [nft] datatype: initialize TYPE_CT_LABEL slot in datatype array - 1 - - --- 2023-09-19 Pablo Neira Ayuso Accepted
[nft,v2] limit: display default burst when listing ruleset [nft,v2] limit: display default burst when listing ruleset - - - - --- 2023-09-19 Pablo Neira Ayuso pablo Accepted
[nf] netfilter: nf_tables: fix memory leak when more than 255 elements expired [nf] netfilter: nf_tables: fix memory leak when more than 255 elements expired - 1 - - --- 2023-09-19 Florian Westphal Accepted
[nft,2/2] libnftables: move init-once guard inside xt_init() [nft,1/2] libnftables: drop gmp_init() and mp_set_memory_functions() - - - - --- 2023-09-19 Thomas Haller pablo Accepted
[nft,1/2] libnftables: drop gmp_init() and mp_set_memory_functions() [nft,1/2] libnftables: drop gmp_init() and mp_set_memory_functions() - - - - --- 2023-09-19 Thomas Haller pablo Accepted
[nft,v2] evaluate: update mark datatype compatibility check from maps [nft,v2] evaluate: update mark datatype compatibility check from maps - 1 - - --- 2023-09-18 Pablo Neira Ayuso pablo Accepted
[nft,1/1] tests/shell: honor NFT_TEST_FAIL_ON_SKIP variable to fail on any skipped tests [nft,1/1] tests/shell: honor NFT_TEST_FAIL_ON_SKIP variable to fail on any skipped tests - - - - --- 2023-09-18 Thomas Haller Accepted
[nft,3/3] tests/shell: run `nft --check` on persisted dump files [nft,1/3] tests/shell: fix preserving ruleset diff after test - - - - --- 2023-09-18 Thomas Haller Accepted
[nft,2/3] tests/shell: simplify collecting error result in "test-wrapper.sh" [nft,1/3] tests/shell: fix preserving ruleset diff after test - - - - --- 2023-09-18 Thomas Haller Accepted
[nft,1/3] tests/shell: fix preserving ruleset diff after test [nft,1/3] tests/shell: fix preserving ruleset diff after test - 1 - - --- 2023-09-18 Thomas Haller Accepted
[nft,3/3] tests/shell: colorize NFT_TEST_HAS_SOCKET_LIMITS tests/shell: minor improvements to "run-tests.sh" - - - - --- 2023-09-18 Thomas Haller Accepted
[nft,2/3] tests/shell: don't show the exit status for failed tests tests/shell: minor improvements to "run-tests.sh" - - - - --- 2023-09-18 Thomas Haller Accepted
[nft,1/3] tests/shell: set C locale in "run-tests.sh" tests/shell: minor improvements to "run-tests.sh" - - - - --- 2023-09-18 Thomas Haller Accepted
[-stable,4.19,2/2] netfilter: nf_tables: missing NFT_TRANS_PREPARE_ERROR in flowtable deactivatation netfilter stable fixes for 4.19 - 1 - - --- 2023-09-18 Pablo Neira Ayuso pablo Accepted
[-stable,4.19,1/2] netfilter: nft_flow_offload: fix underflow in flowtable reference counter netfilter stable fixes for 4.19 - 1 - - --- 2023-09-18 Pablo Neira Ayuso pablo Accepted
[nft,v2] evaluate: expand sets and maps before evaluation [nft,v2] evaluate: expand sets and maps before evaluation - 1 - - --- 2023-09-18 Pablo Neira Ayuso pablo Accepted
[nft,14/14] tests/shell: check diff in "maps/typeof_maps_0" and "sets/typeof_sets_0" test tests/shell: fix tests to skip on lacking feature support - - - - --- 2023-09-18 Thomas Haller Accepted
[nft,13/14] tests/shell: implement NFT_TEST_HAVE_json feature detection as script tests/shell: fix tests to skip on lacking feature support - - - - --- 2023-09-18 Thomas Haller Accepted
[nft,12/14] tests/shell: skip reset tests if kernel lacks support tests/shell: fix tests to skip on lacking feature support - - - - --- 2023-09-18 Thomas Haller Accepted
[nft,11/14] tests/shell: skip test cases if ct expectation and/or timeout lacks support tests/shell: fix tests to skip on lacking feature support - - - - --- 2023-09-18 Thomas Haller Accepted
[nft,10/14] tests/shell: skip test cases involving osf match if kernel lacks support tests/shell: fix tests to skip on lacking feature support - - - - --- 2023-09-18 Thomas Haller Accepted
[nft,09/14] tests/shell: skip catchall tests if kernel lacks support tests/shell: fix tests to skip on lacking feature support - - - - --- 2023-09-18 Thomas Haller Accepted
[nft,08/14] tests/shell: skip destroy tests if kernel lacks support tests/shell: fix tests to skip on lacking feature support - - - - --- 2023-09-18 Thomas Haller Accepted
[nft,07/14] tests/shell: skip inet ingress tests if kernel lacks support tests/shell: fix tests to skip on lacking feature support - - - - --- 2023-09-18 Thomas Haller Accepted
[nft,06/14] tests/shell: skip some tests if kernel lacks netdev egress support tests/shell: fix tests to skip on lacking feature support - - - - --- 2023-09-18 Thomas Haller Accepted
[nft,05/14] tests/shell: skip bitshift tests if kernel lacks support tests/shell: fix tests to skip on lacking feature support - - - - --- 2023-09-18 Thomas Haller Accepted
[nft,04/14] tests/shell: skip inner matching tests if unsupported tests/shell: fix tests to skip on lacking feature support - - - - --- 2023-09-18 Thomas Haller Accepted
[nft,03/14] tests/shell: skip map query if kernel lacks support tests/shell: fix tests to skip on lacking feature support - - - - --- 2023-09-18 Thomas Haller Accepted
[nft,02/14] tests/shell: skip netdev_chain_0 if kernel requires netdev device tests/shell: fix tests to skip on lacking feature support - - - - --- 2023-09-18 Thomas Haller Accepted
[nft,01/14] tests/shell: add and use chain binding feature probe tests/shell: fix tests to skip on lacking feature support - - - - --- 2023-09-18 Thomas Haller Accepted
[nft] evaluate: fix memleak in prefix evaluation with wildcard interface name [nft] evaluate: fix memleak in prefix evaluation with wildcard interface name - - - - --- 2023-09-16 Pablo Neira Ayuso pablo Accepted
[nft,3/3] tests/shell: suggest 4Mb /proc/sys/net/core/{wmem_max,rmem_max} for rootless shell/tests: cleanups and skip tests on Fedora 38 - - - - --- 2023-09-15 Thomas Haller Accepted
[nft,1/3] tests/shell: cleanup creating dummy interfaces in tests shell/tests: cleanups and skip tests on Fedora 38 - - - - --- 2023-09-15 Thomas Haller Accepted
[nft,2/2] tests/shell: colorize NFT_TEST_SKIP_/NFT_TEST_HAVE_ in test output tests/shell: add feature probing via "features/*.nft" files - - - - --- 2023-09-15 Thomas Haller Accepted
[nft,1/2] tests/shell: add feature probing via "features/*.nft" files tests/shell: add feature probing via "features/*.nft" files - - - - --- 2023-09-15 Thomas Haller Accepted
« 1 2 ... 8 9 10301 302 »