Show patches with: Archived = No       |   28495 patches
« 1 2 ... 111 112 113 … 284 285 »
Patch Series A/F/R/T S/W/F Date Submitter Delegate State
[1/6] netfilter: x_tables: fix int overflow in xt_alloc_table_info() [1/6] netfilter: x_tables: fix int overflow in xt_alloc_table_info() - - - - --- 2018-02-01 Pablo Neira Ayuso pablo Accepted
[2/6] netfilter: x_tables: avoid out-of-bounds reads in xt_request_find_{match|target} [1/6] netfilter: x_tables: fix int overflow in xt_alloc_table_info() 1 - - - --- 2018-02-01 Pablo Neira Ayuso pablo Accepted
[3/6] netfilter: ipset: Fix wraparound in hash:*net* types [1/6] netfilter: x_tables: fix int overflow in xt_alloc_table_info() - 1 - - --- 2018-02-01 Pablo Neira Ayuso pablo Accepted
[4/6] netfilter: x_tables: fix pointer leaks to userspace [1/6] netfilter: x_tables: fix int overflow in xt_alloc_table_info() - 1 - - --- 2018-02-01 Pablo Neira Ayuso pablo Accepted
[5/6] netfilter: ipt_CLUSTERIP: fix out-of-bounds accesses in clusterip_tg_check() [1/6] netfilter: x_tables: fix int overflow in xt_alloc_table_info() - 1 - - --- 2018-02-01 Pablo Neira Ayuso pablo Accepted
[6/6] netfilter: on sockopt() acquire sock lock only in the required scope [1/6] netfilter: x_tables: fix int overflow in xt_alloc_table_info() - - - - --- 2018-02-01 Pablo Neira Ayuso pablo Accepted
[libnftnl] examples: do not call nftnl_batch_is_supported() [libnftnl] examples: do not call nftnl_batch_is_supported() - - - - --- 2018-02-01 Pablo Neira Ayuso pablo Accepted
[nft] netlink_delinearize: add assertion to prevent infinite loop [nft] netlink_delinearize: add assertion to prevent infinite loop - - - - --- 2018-02-02 Pablo Neira Ayuso pablo Accepted
[nf,1/3] netfilter: nft_flow_offload: no need to flush entries on module removal [nf,1/3] netfilter: nft_flow_offload: no need to flush entries on module removal - - - - --- 2018-02-06 Pablo Neira Ayuso pablo Accepted
[nf,2/3] netfilter: nft_flow_offload: move flowtable cleanup routines to nf_flow_table [nf,1/3] netfilter: nft_flow_offload: no need to flush entries on module removal - - - - --- 2018-02-06 Pablo Neira Ayuso pablo Accepted
[nf,3/3] netfilter: nf_tables: fix flowtable free [nf,1/3] netfilter: nft_flow_offload: no need to flush entries on module removal - - - - --- 2018-02-06 Pablo Neira Ayuso pablo Accepted
[RFC,1/4] netlink: add NLA_PAD definition Netlink bus descriptions - - - - --- 2018-02-07 Pablo Neira Ayuso pablo RFC
[RFC,2/4] netlink: add generic object description infrastructure Netlink bus descriptions - - - - --- 2018-02-07 Pablo Neira Ayuso pablo RFC
[RFC,3/4] netfilter: nfnetlink: add support for netlink descriptions Netlink bus descriptions - - - - --- 2018-02-07 Pablo Neira Ayuso pablo RFC
[RFC,4/4] netfilter: nf_tables: add netlink description Netlink bus descriptions - - - - --- 2018-02-07 Pablo Neira Ayuso pablo RFC
[00/11] Netfilter fixes for net - - - - --- 2018-02-07 Pablo Neira Ayuso pablo Accepted
[01/11] netfilter: x_tables: make allocation less aggressive [01/11] netfilter: x_tables: make allocation less aggressive 1 1 1 - --- 2018-02-07 Pablo Neira Ayuso pablo Accepted
[02/11] netfilter: ipv6: nf_defrag: Kill frag queue on RFC2460 failure [01/11] netfilter: x_tables: make allocation less aggressive - 1 - - --- 2018-02-07 Pablo Neira Ayuso pablo Accepted
[03/11] netfilter: flowtable infrastructure depends on NETFILTER_INGRESS [01/11] netfilter: x_tables: make allocation less aggressive - - - - --- 2018-02-07 Pablo Neira Ayuso pablo Accepted
[04/11] netfilter: xt_cgroup: initialize info->priv in cgroup_mt_check_v1() [01/11] netfilter: x_tables: make allocation less aggressive - 1 - - --- 2018-02-07 Pablo Neira Ayuso pablo Accepted
[05/11] netfilter: nft_flow_offload: wait for garbage collector to run after cleanup [01/11] netfilter: x_tables: make allocation less aggressive - - - - --- 2018-02-07 Pablo Neira Ayuso pablo Accepted
[06/11] netfilter: nft_flow_offload: no need to flush entries on module removal [01/11] netfilter: x_tables: make allocation less aggressive - - - - --- 2018-02-07 Pablo Neira Ayuso pablo Accepted
[07/11] netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insert [01/11] netfilter: x_tables: make allocation less aggressive - 1 2 - --- 2018-02-07 Pablo Neira Ayuso pablo Accepted
[08/11] netfilter: nft_flow_offload: move flowtable cleanup routines to nf_flow_table [01/11] netfilter: x_tables: make allocation less aggressive - - - - --- 2018-02-07 Pablo Neira Ayuso pablo Accepted
[09/11] netfilter: nf_tables: fix flowtable free [01/11] netfilter: x_tables: make allocation less aggressive - - - - --- 2018-02-07 Pablo Neira Ayuso pablo Accepted
[10/11] netfilter: remove useless prototype [01/11] netfilter: x_tables: make allocation less aggressive - - - - --- 2018-02-07 Pablo Neira Ayuso pablo Accepted
[11/11] netfilter: nf_flow_offload: fix use-after-free and a resource leak [01/11] netfilter: x_tables: make allocation less aggressive - - - - --- 2018-02-07 Pablo Neira Ayuso pablo Accepted
[nft,1/6] src: pass family to payload_dependency_kill() [nft,1/6] src: pass family to payload_dependency_kill() - - - - --- 2018-02-14 Pablo Neira Ayuso pablo Accepted
[nft] parser_bison: restore nft {import,export} ruleset [nft] parser_bison: restore nft {import,export} ruleset - - - - --- 2018-02-14 Pablo Neira Ayuso pablo Not Applicable
[libnftnl] examples: nft-set-del: fix set deletion [libnftnl] examples: nft-set-del: fix set deletion - - - - --- 2018-02-14 Pablo Neira Ayuso pablo Accepted
[libnftnl] set_elem: nftnl_set_elems_parse() returns 0 if set is empty [libnftnl] set_elem: nftnl_set_elems_parse() returns 0 if set is empty - - - - --- 2018-02-14 Pablo Neira Ayuso pablo Accepted
[nft] src: bail out when exporting ruleset with unsupported output [nft] src: bail out when exporting ruleset with unsupported output - 1 - - --- 2018-02-15 Pablo Neira Ayuso pablo Accepted
[RFC,1/3] netfilter: nf_tables: add infrastructure to provide intermediate representation nftables meets bpf - - - - --- 2018-02-19 Pablo Neira Ayuso pablo RFC
[RFC,2/3] netfilter: add ast to target transformation nftables meets bpf - - - - --- 2018-02-19 Pablo Neira Ayuso pablo RFC
[RFC,3/3] netfilter: nf_tables: add BPF-based jit infrastructure nftables meets bpf - - - - --- 2018-02-19 Pablo Neira Ayuso pablo RFC
[00/19] Netfilter fixes for net - - - - --- 2018-02-20 Pablo Neira Ayuso pablo Accepted
[01/19] netfilter: x_tables: remove size check [01/19] netfilter: x_tables: remove size check - - 1 - --- 2018-02-20 Pablo Neira Ayuso pablo Accepted
[02/19] netfilter: ipt_CLUSTERIP: fix a race condition of proc file creation [01/19] netfilter: x_tables: remove size check - 1 1 1 --- 2018-02-20 Pablo Neira Ayuso pablo Accepted
[03/19] netfilter: drop outermost socket lock in getsockopt() [01/19] netfilter: x_tables: remove size check - - 1 - --- 2018-02-20 Pablo Neira Ayuso pablo Accepted
[04/19] netfilter: add back stackpointer size checks [01/19] netfilter: x_tables: remove size check - 1 - - --- 2018-02-20 Pablo Neira Ayuso pablo Accepted
[05/19] netfilter: ipt_CLUSTERIP: fix a refcount bug in clusterip_config_find_get() [01/19] netfilter: x_tables: remove size check - 1 1 - --- 2018-02-20 Pablo Neira Ayuso pablo Accepted
[06/19] netfilter: x_tables: remove pr_info where possible [01/19] netfilter: x_tables: remove size check - - - - --- 2018-02-20 Pablo Neira Ayuso pablo Accepted
[07/19] netfilter: x_tables: use pr ratelimiting in xt core [01/19] netfilter: x_tables: remove size check - - - - --- 2018-02-20 Pablo Neira Ayuso pablo Accepted
[08/19] netfilter: xt_CT: use pr ratelimiting [01/19] netfilter: x_tables: remove size check - - - - --- 2018-02-20 Pablo Neira Ayuso pablo Accepted
[09/19] netfilter: xt_NFQUEUE: use pr ratelimiting [01/19] netfilter: x_tables: remove size check - - - - --- 2018-02-20 Pablo Neira Ayuso pablo Accepted
[10/19] netfilter: xt_set: use pr ratelimiting [01/19] netfilter: x_tables: remove size check - - - - --- 2018-02-20 Pablo Neira Ayuso pablo Accepted
[11/19] netfilter: bridge: use pr ratelimiting [01/19] netfilter: x_tables: remove size check - - - - --- 2018-02-20 Pablo Neira Ayuso pablo Accepted
[12/19] netfilter: x_tables: rate-limit table mismatch warnings [01/19] netfilter: x_tables: remove size check - - - - --- 2018-02-20 Pablo Neira Ayuso pablo Accepted
[13/19] netfilter: x_tables: use pr ratelimiting in matches/targets [01/19] netfilter: x_tables: remove size check - - - - --- 2018-02-20 Pablo Neira Ayuso pablo Accepted
[14/19] netfilter: x_tables: use pr ratelimiting in all remaining spots [01/19] netfilter: x_tables: remove size check - - - - --- 2018-02-20 Pablo Neira Ayuso pablo Accepted
[15/19] .gitignore: ignore ASN.1 auto generated files [01/19] netfilter: x_tables: remove size check - - - - --- 2018-02-20 Pablo Neira Ayuso pablo Accepted
[16/19] netfilter: x_tables: fix missing timer initialization in xt_LED [01/19] netfilter: x_tables: remove size check - 1 - - --- 2018-02-20 Pablo Neira Ayuso pablo Accepted
[17/19] netfilter: nat: cope with negative port range [01/19] netfilter: x_tables: remove size check - 1 - - --- 2018-02-20 Pablo Neira Ayuso pablo Accepted
[18/19] netfilter: xt_hashlimit: fix lock imbalance [01/19] netfilter: x_tables: remove size check - 1 - - --- 2018-02-20 Pablo Neira Ayuso pablo Accepted
[19/19] netfilter: IDLETIMER: be syzkaller friendly [01/19] netfilter: x_tables: remove size check - 1 - - --- 2018-02-20 Pablo Neira Ayuso pablo Accepted
[nft] segtree: check for overlapping elements at insertion [nft] segtree: check for overlapping elements at insertion - 1 - - --- 2018-02-24 Pablo Neira Ayuso pablo Accepted
[nf-next] netfilter: nf_tables: set maximum flowtable size [nf-next] netfilter: nf_tables: set maximum flowtable size - - - - --- 2018-02-26 Pablo Neira Ayuso pablo Deferred
[libnftnl] flowtable: allow to specify size [libnftnl] flowtable: allow to specify size - - - - --- 2018-02-26 Pablo Neira Ayuso pablo Accepted
[nft] src: allow to specify flowtable maximum size [nft] src: allow to specify flowtable maximum size - - - - --- 2018-02-26 Pablo Neira Ayuso pablo Deferred
[nf,1/2] netfilter: nf_tables: return EBUSY if device already belongs to flowtable [nf,1/2] netfilter: nf_tables: return EBUSY if device already belongs to flowtable - - - - --- 2018-02-26 Pablo Neira Ayuso pablo Changes Requested
[nf,2/2] netfilter: nf_tables: missing attribute validation in nf_tables_delflowtable() [nf,1/2] netfilter: nf_tables: return EBUSY if device already belongs to flowtable - - - - --- 2018-02-26 Pablo Neira Ayuso pablo Accepted
[1/2,nf,v2] netfilter: nf_tables: return EBUSY if device already belongs to flowtable [1/2,nf,v2] netfilter: nf_tables: return EBUSY if device already belongs to flowtable - - - - --- 2018-02-27 Pablo Neira Ayuso pablo Accepted
[nf] netfilter: nf_tables: use the right index from flowtable error path [nf] netfilter: nf_tables: use the right index from flowtable error path - - - - --- 2018-02-27 Pablo Neira Ayuso pablo Accepted
[nft] tests: shell: regression test for bugzilla 1228 [nft] tests: shell: regression test for bugzilla 1228 - - - - --- 2018-02-28 Pablo Neira Ayuso pablo Accepted
[00/14] Netfilter/IPVS fixes for net - - - - --- 2018-03-02 Pablo Neira Ayuso pablo Accepted
[01/14] netfilter: ipt_CLUSTERIP: put config struct if we can't increment ct refcount [01/14] netfilter: ipt_CLUSTERIP: put config struct if we can't increment ct refcount - - - - --- 2018-03-02 Pablo Neira Ayuso pablo Accepted
[02/14] netfilter: ipt_CLUSTERIP: put config instead of freeing it [01/14] netfilter: ipt_CLUSTERIP: put config struct if we can't increment ct refcount - - - - --- 2018-03-02 Pablo Neira Ayuso pablo Accepted
[03/14] netfilter: ipv6: fix use-after-free Write in nf_nat_ipv6_manip_pkt [01/14] netfilter: ipt_CLUSTERIP: put config struct if we can't increment ct refcount - 1 - - --- 2018-03-02 Pablo Neira Ayuso pablo Accepted
[04/14] netfilter: bridge: ebt_among: add missing match size checks [01/14] netfilter: ipt_CLUSTERIP: put config struct if we can't increment ct refcount - - - - --- 2018-03-02 Pablo Neira Ayuso pablo Accepted
[05/14] netfilter: ebtables: convert BUG_ONs to WARN_ONs [01/14] netfilter: ipt_CLUSTERIP: put config struct if we can't increment ct refcount - - - - --- 2018-03-02 Pablo Neira Ayuso pablo Accepted
[06/14] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets [01/14] netfilter: ipt_CLUSTERIP: put config struct if we can't increment ct refcount - - - - --- 2018-03-02 Pablo Neira Ayuso pablo Accepted
[07/14] netfilter: nf_flow_table: fix checksum when handling DNAT [01/14] netfilter: ipt_CLUSTERIP: put config struct if we can't increment ct refcount - - - - --- 2018-03-02 Pablo Neira Ayuso pablo Accepted
[08/14] netfilter: increase IPSTATS_MIB_CSUMERRORS stat [01/14] netfilter: ipt_CLUSTERIP: put config struct if we can't increment ct refcount - - - - --- 2018-03-02 Pablo Neira Ayuso pablo Accepted
[09/14] netfilter: don't set F_IFACE on ipv6 fib lookups [01/14] netfilter: ipt_CLUSTERIP: put config struct if we can't increment ct refcount - - - - --- 2018-03-02 Pablo Neira Ayuso pablo Accepted
[10/14] netfilter: use skb_to_full_sk in ip6_route_me_harder [01/14] netfilter: ipt_CLUSTERIP: put config struct if we can't increment ct refcount - 1 - - --- 2018-03-02 Pablo Neira Ayuso pablo Accepted
[11/14] netfilter: nf_tables: return EBUSY if device already belongs to flowtable [01/14] netfilter: ipt_CLUSTERIP: put config struct if we can't increment ct refcount - - - - --- 2018-03-02 Pablo Neira Ayuso pablo Accepted
[12/14] netfilter: nf_tables: missing attribute validation in nf_tables_delflowtable() [01/14] netfilter: ipt_CLUSTERIP: put config struct if we can't increment ct refcount - - - - --- 2018-03-02 Pablo Neira Ayuso pablo Accepted
[13/14] netfilter: nf_tables: use the right index from flowtable error path [01/14] netfilter: ipt_CLUSTERIP: put config struct if we can't increment ct refcount - - - - --- 2018-03-02 Pablo Neira Ayuso pablo Accepted
[14/14] ipvs: remove IPS_NAT_MASK check to fix passive FTP [01/14] netfilter: ipt_CLUSTERIP: put config struct if we can't increment ct refcount 1 1 - - --- 2018-03-02 Pablo Neira Ayuso pablo Accepted
[nft] configure: misc updates [nft] configure: misc updates - - - - --- 2018-03-03 Pablo Neira Ayuso strlen Accepted
[nft] netlink: remove non-batching routines [nft] netlink: remove non-batching routines - - - - --- 2018-03-03 Pablo Neira Ayuso strlen Accepted
[nft,1/2] src: add variable expression and use it to allow redefinitions [nft,1/2] src: add variable expression and use it to allow redefinitions - - - - --- 2018-03-03 Pablo Neira Ayuso pablo Changes Requested
[nft,2/2] tests: shell: redefine and undefine [nft,1/2] src: add variable expression and use it to allow redefinitions - - - - --- 2018-03-03 Pablo Neira Ayuso pablo Accepted
[nft,v2] src: add variable expression and use it to allow redefinitions [nft,v2] src: add variable expression and use it to allow redefinitions - - - - --- 2018-03-03 Pablo Neira Ayuso pablo Accepted
[nf] netfilter: nft_set_hash: skip fixed hash if timeout is specified [nf] netfilter: nft_set_hash: skip fixed hash if timeout is specified - - - - --- 2018-03-05 Pablo Neira Ayuso pablo Accepted
[nft] tests: shell: set timeout and size combination coverage [nft] tests: shell: set timeout and size combination coverage - - - - --- 2018-03-05 Pablo Neira Ayuso pablo Accepted
[nft,1/2] netlink: print chain handle with --echo --handle [nft,1/2] netlink: print chain handle with --echo --handle - - - - --- 2018-03-05 Pablo Neira Ayuso pablo Accepted
[nft,2/2] netlink: print table handle with --echo --handle [nft,1/2] netlink: print chain handle with --echo --handle - - - - --- 2018-03-05 Pablo Neira Ayuso pablo Accepted
[nft] rule: print object handle with --echo --handle [nft] rule: print object handle with --echo --handle - - - - --- 2018-03-05 Pablo Neira Ayuso pablo Accepted
[nft] rule: broken handle listing of table and named objects [nft] rule: broken handle listing of table and named objects - - - - --- 2018-03-05 Pablo Neira Ayuso pablo Accepted
[nft] src: support for get element command [nft] src: support for get element command - - - - --- 2018-03-07 Pablo Neira Ayuso pablo Accepted
[nft] src: move monitor code to src/monitor.c [nft] src: move monitor code to src/monitor.c 2 - - - --- 2018-03-07 Pablo Neira Ayuso pablo Accepted
[nft] src: remove unused batch support checks [nft] src: remove unused batch support checks - - - - --- 2018-03-07 Pablo Neira Ayuso pablo Accepted
src: don't not dump set content from netlink_get_setelems() src: don't not dump set content from netlink_get_setelems() - 1 - - --- 2018-03-07 Pablo Neira Ayuso pablo Accepted
[nf-next] netfilter: nft_ct: add NFT_CT_{SRC,DST}_{IP,IP6} [nf-next] netfilter: nft_ct: add NFT_CT_{SRC,DST}_{IP,IP6} 1 - - - --- 2018-03-09 Pablo Neira Ayuso pablo Accepted
[libnftnl] src: support for NFT_CT_{SRC,DST}_{IP,IP6} [libnftnl] src: support for NFT_CT_{SRC,DST}_{IP,IP6} - - - - --- 2018-03-09 Pablo Neira Ayuso pablo Accepted
[nft] ct: support for NFT_CT_{SRC,DST}_{IP,IP6} [nft] ct: support for NFT_CT_{SRC,DST}_{IP,IP6} - - - - --- 2018-03-09 Pablo Neira Ayuso pablo Superseded
[nf] netfilter: nf_tables: release flowtable hooks [nf] netfilter: nf_tables: release flowtable hooks - - - - --- 2018-03-11 Pablo Neira Ayuso pablo Accepted
[0/5] Netfilter fixes for net - - - - --- 2018-03-12 Pablo Neira Ayuso pablo Accepted
[1/5] netfilter: nft_set_hash: skip fixed hash if timeout is specified [1/5] netfilter: nft_set_hash: skip fixed hash if timeout is specified - 1 - - --- 2018-03-12 Pablo Neira Ayuso pablo Accepted
« 1 2 ... 111 112 113 … 284 285 »