Show patches with: Archived = No       |   28553 patches
« 1 2 3 4 … 285 286 »
Patch Series A/F/R/T S/W/F Date Submitter Delegate State
[nf] netfilter: nf_tables: register hooks last when adding new chain/flowtable [nf] netfilter: nf_tables: register hooks last when adding new chain/flowtable - 2 - - --- 2024-02-21 Pablo Neira Ayuso pablo Accepted
[nf,2/2] netfilter: nft_flow_offload: release dst in case direct xmit path is used [nf,1/2] netfilter: nft_flow_offload: reset dst in route object after setting up flow - 1 - - --- 2024-02-21 Pablo Neira Ayuso pablo Accepted
[nf,1/2] netfilter: nft_flow_offload: reset dst in route object after setting up flow [nf,1/2] netfilter: nft_flow_offload: reset dst in route object after setting up flow - 1 - - --- 2024-02-21 Pablo Neira Ayuso pablo Accepted
[libnftnl] obj: ct_timeout: setter checks for timeout array boundaries [libnftnl] obj: ct_timeout: setter checks for timeout array boundaries - 1 - - --- 2024-02-20 Pablo Neira Ayuso pablo Accepted
[nf] netfilter: nf_tables: set dormant flag on hook register failure [nf] netfilter: nf_tables: set dormant flag on hook register failure - 1 - - --- 2024-02-19 Florian Westphal pablo Accepted
[nft,8/8] tests: shell: skip if kernel does not allow to restore set element expiration [nft,1/8] tests: shell: connlimit tests requires set expression support - - - - --- 2023-11-22 Pablo Neira Ayuso pablo Accepted
[nft,7/8] tests: shell: skip secmark tests if kernel does not support it [nft,1/8] tests: shell: connlimit tests requires set expression support - - - - --- 2023-11-22 Pablo Neira Ayuso pablo Accepted
[nft,6/8] tests: shell: split nat inet tests [nft,1/8] tests: shell: connlimit tests requires set expression support - - - - --- 2023-11-22 Pablo Neira Ayuso pablo Accepted
[nft,5/8] tests: shell: skip nat inet if kernel does not support it [nft,1/8] tests: shell: connlimit tests requires set expression support - - - - --- 2023-11-22 Pablo Neira Ayuso pablo Accepted
[nft,4/8] tests: shell: skip synproxy test if kernel does not support it [nft,1/8] tests: shell: connlimit tests requires set expression support - - - - --- 2023-11-22 Pablo Neira Ayuso pablo Accepted
[nft,3/8] tests: shell: detach synproxy test [nft,1/8] tests: shell: connlimit tests requires set expression support - - - - --- 2023-11-22 Pablo Neira Ayuso pablo Accepted
[nft,2/8] tests: shell: skip stateful object updates if unsupported [nft,1/8] tests: shell: connlimit tests requires set expression support - - - - --- 2023-11-22 Pablo Neira Ayuso pablo Accepted
[nft,1/8] tests: shell: connlimit tests requires set expression support [nft,1/8] tests: shell: connlimit tests requires set expression support - - - - --- 2023-11-22 Pablo Neira Ayuso pablo Accepted
[nft] evaluate: bogus error when adding devices to flowtable [nft] evaluate: bogus error when adding devices to flowtable - 1 - - --- 2023-11-22 Pablo Neira Ayuso pablo Accepted
[v6,05/13] x86/bugs: Rename RETPOLINE to MITIGATION_RETPOLINE Untitled series #383235 - - 1 - --- 2023-11-21 Breno Leitao pablo Awaiting Upstream
[nft] tests: shell: flush connlimit sets [nft] tests: shell: flush connlimit sets - 1 - - --- 2023-11-21 Pablo Neira Ayuso pablo Accepted
[6.6.y,2/2] netfilter: nf_tables: split async and sync catchall in two functions netfilter: fix catchall element double-free - 1 - - --- 2023-11-21 Florian Westphal pablo Awaiting Upstream
[6.6.y,1/2] netfilter: nf_tables: remove catchall element in GC sync path netfilter: fix catchall element double-free - 1 - - --- 2023-11-21 Florian Westphal pablo Awaiting Upstream
[nft,v2,1/1] tests/shell: sanitize "handle" in JSON output [nft,v2,1/1] tests/shell: sanitize "handle" in JSON output - - - - --- 2023-11-21 Thomas Haller pablo Changes Requested
[nft] tests: shell: quote reference to array to iterate over empty string [nft] tests: shell: quote reference to array to iterate over empty string - 1 - - --- 2023-11-21 Pablo Neira Ayuso pablo Accepted
[nft] tests: shell: adjust add-after-delete flowtable for older kernels [nft] tests: shell: adjust add-after-delete flowtable for older kernels - - - - --- 2023-11-20 Pablo Neira Ayuso pablo Accepted
[nft,2/2] netlink: add and use _nftnl_udata_buf_alloc() helper [nft,1/2] utils: add memory_allocation_check() helper - - - - --- 2023-11-08 Thomas Haller pablo Changes Requested
[nft,1/2] utils: add memory_allocation_check() helper [nft,1/2] utils: add memory_allocation_check() helper - - - - --- 2023-11-08 Thomas Haller pablo Changes Requested
[nf,v3] netfilter: nf_tables: remove catchall element in GC sync path [nf,v3] netfilter: nf_tables: remove catchall element in GC sync path - 1 - - --- 2023-11-06 Pablo Neira Ayuso pablo Not Applicable
[nf,v2] netfilter: nf_tables: remove catchall element in GC sync path [nf,v2] netfilter: nf_tables: remove catchall element in GC sync path - 1 - - --- 2023-11-06 Pablo Neira Ayuso pablo Not Applicable
[nf] netfilter: nf_tables: remove catchall element in GC sync path [nf] netfilter: nf_tables: remove catchall element in GC sync path - 1 - - --- 2023-11-06 Pablo Neira Ayuso pablo Not Applicable
[nf-next,v3] netfilter: nf_tables: Add locking for NFT_MSG_GETSETELEM_RESET requests [nf-next,v3] netfilter: nf_tables: Add locking for NFT_MSG_GETSETELEM_RESET requests - - - - --- 2023-11-02 Phil Sutter pablo Changes Requested
[nft,2/2] json: drop handling missing json() hook for "struct expr_ops" [nft,1/2] json: implement json() hook for "symbol_expr_ops"/"variabl_expr_ops" - - - - --- 2023-11-02 Thomas Haller pablo Not Applicable
[nft,1/2] json: implement json() hook for "symbol_expr_ops"/"variabl_expr_ops" [nft,1/2] json: implement json() hook for "symbol_expr_ops"/"variabl_expr_ops" - - - - --- 2023-11-02 Thomas Haller pablo Not Applicable
[net] netfilter: flowtable: additional checks for outdated flows [net] netfilter: flowtable: additional checks for outdated flows - 1 1 - --- 2023-10-24 Vlad Buslov pablo Changes Requested
[libnetfilter_queue,1/1] Retire 2 libnfnetlink-specific functions libnfnetlink dependency elimination - - - - --- 2023-10-24 Duncan Roe pablo Changes Requested
[nft] evaluate: validate maximum log statement prefix length [nft] evaluate: validate maximum log statement prefix length - - - - --- 2023-10-17 Pablo Neira Ayuso pablo Accepted
netfilter: ipset: fix race condition in ipset swap, destroy and test/add/del netfilter: ipset: fix race condition in ipset swap, destroy and test/add/del - - - - --- 2023-10-17 xiaolinkui pablo RFC
[nf-next,RFC] netfilter: nf_tables: shrink memory consumption of set elements [nf-next,RFC] netfilter: nf_tables: shrink memory consumption of set elements - - - - --- 2023-10-13 Pablo Neira Ayuso pablo RFC
[conntrack,v6] conntrack: ct label update requires proper ruleset [conntrack,v6] conntrack: ct label update requires proper ruleset - - - - --- 2023-10-12 Pablo Neira Ayuso pablo Accepted
[conntrack,v4] conntrack: label update requires a previous label in place [conntrack,v4] conntrack: label update requires a previous label in place - - - - --- 2023-10-12 Pablo Neira Ayuso pablo Changes Requested
[conntrack,v3] conntrack: label update requires a previous label in place [conntrack,v3] conntrack: label update requires a previous label in place - - - - --- 2023-10-11 Pablo Neira Ayuso pablo Changes Requested
[conntrack] conntrack: label update requires a previous label in place [conntrack] conntrack: label update requires a previous label in place - - - - --- 2023-10-11 Pablo Neira Ayuso pablo Changes Requested
[nft] doc: remove references to timeout in reset command [nft] doc: remove references to timeout in reset command - 1 - - --- 2023-10-10 Pablo Neira Ayuso pablo Changes Requested
[libnetfilter_queue] src: Fix IPv6 Fragment Header processing [libnetfilter_queue] src: Fix IPv6 Fragment Header processing - 1 - - --- 2023-10-08 Duncan Roe pablo Accepted
[nft,3/3] tests/shell: add "-S|--setup-host" option to set sysctl for rootless tests [nft,1/3] tests/shell: mount all of "/var/run" in "test-wrapper.sh" - - - - --- 2023-10-06 Thomas Haller pablo Accepted
[nft,2/3] tests/shell: preserve result directory with NFT_TEST_FAIL_ON_SKIP [nft,1/3] tests/shell: mount all of "/var/run" in "test-wrapper.sh" - - - - --- 2023-10-06 Thomas Haller pablo Accepted
[nft,1/3] tests/shell: mount all of "/var/run" in "test-wrapper.sh" [nft,1/3] tests/shell: mount all of "/var/run" in "test-wrapper.sh" - - - - --- 2023-10-06 Thomas Haller pablo Accepted
[nf,2/2] netfilter: nft_set_rbtree: remove async GC [nf,1/2] netfilter: nft_set_rbtree: move sync GC from insert path to set->ops->commit - 1 - - --- 2023-09-29 Pablo Neira Ayuso pablo RFC
[nf,1/2] netfilter: nft_set_rbtree: move sync GC from insert path to set->ops->commit [nf,1/2] netfilter: nft_set_rbtree: move sync GC from insert path to set->ops->commit - 1 - - --- 2023-09-29 Pablo Neira Ayuso pablo RFC
[nft,5/5] datatype: use xmalloc() for allocating datatype in datatype_clone() more various cleanups related to struct datatype - - - - --- 2023-09-27 Thomas Haller pablo Accepted
[nft,2/3] nfnl_osf: rework nf_osf_parse_opt() and avoid "-Wstrict-overflow" warning Two fixes to avoid "-Wstrict-overflow" warnings - - - - --- 2023-09-27 Thomas Haller pablo Changes Requested
[nft,1/3] nft: add NFT_ARRAY_SIZE() helper Two fixes to avoid "-Wstrict-overflow" warnings - - - - --- 2023-09-27 Thomas Haller pablo Changes Requested
[libnetfilter_queue] Fix typo in examples/nf-queue.c from patch 9a8e4c3 [libnetfilter_queue] Fix typo in examples/nf-queue.c from patch 9a8e4c3 - - - - --- 2023-09-27 Duncan Roe pablo Accepted
[nft,3/3] netlink_linearize: skip set element expression in map statement key [nft,1/3] tests: py: add map support - - - - --- 2023-09-26 Pablo Neira Ayuso pablo Changes Requested
[nft,8/9] datatype: use __attribute__((packed)) instead of enum bitfields various cleanups related to enums and struct datatype - - - - --- 2023-09-20 Thomas Haller pablo Changes Requested
[nft,7/9] expression: cleanup expr_ops_by_type() and handle u32 input various cleanups related to enums and struct datatype - - - - --- 2023-09-20 Thomas Haller pablo Accepted
[nft,6/9] netlink: handle invalid etype in set_make_key() various cleanups related to enums and struct datatype - 1 - - --- 2023-09-20 Thomas Haller pablo Accepted
[nft,5/9] payload: use enum icmp_hdr_field_type in payload_may_dependency_kill_icmp() various cleanups related to enums and struct datatype - - - - --- 2023-09-20 Thomas Haller pablo Accepted
[nft,4/9] datatype: use "enum byteorder" instead of int in set_datatype_alloc() various cleanups related to enums and struct datatype - - - - --- 2023-09-20 Thomas Haller pablo Accepted
[nft,3/9] datatype: drop flags field from datatype various cleanups related to enums and struct datatype - - - - --- 2023-09-20 Thomas Haller pablo Changes Requested
[nft,v2] limit: display default burst when listing ruleset [nft,v2] limit: display default burst when listing ruleset - - - - --- 2023-09-19 Pablo Neira Ayuso pablo Accepted
[nft] limit: display default burst when listing ruleset [nft] limit: display default burst when listing ruleset - - - - --- 2023-09-19 Pablo Neira Ayuso pablo Changes Requested
[nft,2/2] libnftables: move init-once guard inside xt_init() [nft,1/2] libnftables: drop gmp_init() and mp_set_memory_functions() - - - - --- 2023-09-19 Thomas Haller pablo Accepted
[nft,1/2] libnftables: drop gmp_init() and mp_set_memory_functions() [nft,1/2] libnftables: drop gmp_init() and mp_set_memory_functions() - - - - --- 2023-09-19 Thomas Haller pablo Accepted
[nft,1/1] datatype: explicitly set missing datatypes for TYPE_CT_LABEL,TYPE_CT_EVENTBIT [nft,1/1] datatype: explicitly set missing datatypes for TYPE_CT_LABEL,TYPE_CT_EVENTBIT - - - - --- 2023-09-19 Thomas Haller pablo Changes Requested
[nft,v2] evaluate: update mark datatype compatibility check from maps [nft,v2] evaluate: update mark datatype compatibility check from maps - 1 - - --- 2023-09-18 Pablo Neira Ayuso pablo Accepted
[nft] evaluate: update mark datatype compatibility check from maps [nft] evaluate: update mark datatype compatibility check from maps - 1 - - --- 2023-09-18 Pablo Neira Ayuso pablo Changes Requested
[-stable,4.19,2/2] netfilter: nf_tables: missing NFT_TRANS_PREPARE_ERROR in flowtable deactivatation netfilter stable fixes for 4.19 - 1 - - --- 2023-09-18 Pablo Neira Ayuso pablo Accepted
[-stable,4.19,1/2] netfilter: nft_flow_offload: fix underflow in flowtable reference counter netfilter stable fixes for 4.19 - 1 - - --- 2023-09-18 Pablo Neira Ayuso pablo Accepted
[nft,v2] evaluate: expand sets and maps before evaluation [nft,v2] evaluate: expand sets and maps before evaluation - 1 - - --- 2023-09-18 Pablo Neira Ayuso pablo Accepted
[nft] evaluate: expand sets and maps before evaluation [nft] evaluate: expand sets and maps before evaluation - 1 - - --- 2023-09-16 Pablo Neira Ayuso pablo Changes Requested
[nft] evaluate: fix memleak in prefix evaluation with wildcard interface name [nft] evaluate: fix memleak in prefix evaluation with wildcard interface name - - - - --- 2023-09-16 Pablo Neira Ayuso pablo Accepted
[nft,1/1] netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set() [nft,1/1] netlink: fix leaking typeof_expr_data/typeof_expr_key in netlink_delinearize_set() - - - - --- 2023-09-14 Thomas Haller pablo Accepted
[nf,v3,2/2] selftests: netfilter: Test nf_tables audit logging nf_tables: follow-up on audit fix, add selftest - - - - --- 2023-09-13 Phil Sutter pablo Accepted
[nf,v3,1/2] netfilter: nf_tables: Fix entries val in rule reset audit log nf_tables: follow-up on audit fix, add selftest - 1 1 - --- 2023-09-13 Phil Sutter pablo Accepted
[nf] netfilter: conntrack: fix extension size table [nf] netfilter: conntrack: fix extension size table - 1 - - --- 2023-09-12 Florian Westphal pablo Accepted
[nft,v2] datatype: fix leak and cleanup reference counting for struct datatype [nft,v2] datatype: fix leak and cleanup reference counting for struct datatype - 1 - - --- 2023-09-12 Thomas Haller pablo Accepted
[nft] datatype: fix leak and cleanup reference counting for struct datatype [nft] datatype: fix leak and cleanup reference counting for struct datatype - 1 - - --- 2023-09-11 Thomas Haller pablo Changes Requested
[libmnl] nlmsg, attr: fix false positives when validating buffer sizes [libmnl] nlmsg, attr: fix false positives when validating buffer sizes - - - - --- 2023-09-10 Jeremy Sowden pablo Changes Requested
[nf] netfilter: nf_tables: disallow element removal on anonymous sets [nf] netfilter: nf_tables: disallow element removal on anonymous sets - 1 - - --- 2023-09-10 Pablo Neira Ayuso pablo Accepted
[nf,v2] netfilter: nf_tables: Fix entries val in rule reset audit log [nf,v2] netfilter: nf_tables: Fix entries val in rule reset audit log - 1 - - --- 2023-09-08 Phil Sutter pablo Changes Requested
[nf,4/4] netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration [nf,1/4] netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention - 1 - - --- 2023-09-08 Pablo Neira Ayuso pablo Accepted
[nf,3/4] netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails [nf,1/4] netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention - 1 - - --- 2023-09-08 Pablo Neira Ayuso pablo Accepted
[nf,2/4] netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC [nf,1/4] netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention - 2 - - --- 2023-09-08 Pablo Neira Ayuso pablo Accepted
[nf,1/4] netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention [nf,1/4] netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention - 1 - - --- 2023-09-08 Pablo Neira Ayuso pablo Accepted
[nf,v2] netfilter: nf_tables: disallow rule removal from chain binding [nf,v2] netfilter: nf_tables: disallow rule removal from chain binding - 1 - - --- 2023-09-08 Pablo Neira Ayuso pablo Accepted
[nf-next,RFC,2/2] selftests: netfilter: Test nf_tables audit logging nf_tables: follow-up on audit fix, propose kselftest - - - - --- 2023-09-08 Phil Sutter pablo Changes Requested
[nf,1/2] netfilter: nf_tables: Fix entries val in rule reset audit log nf_tables: follow-up on audit fix, propose kselftest - 1 - - --- 2023-09-08 Phil Sutter pablo Changes Requested
[nft,v3,11/11] tests/shell: support running tests in parallel tests/shell: allow running tests as - - - - --- 2023-09-04 Thomas Haller pablo Changes Requested
[nft,v3,10/11] tests/shell: move taint check to "test-wrapper.sh" tests/shell: allow running tests as - - - - --- 2023-09-04 Thomas Haller pablo Changes Requested
[nft,v3,09/11] tests/shell: rework printing of test results tests/shell: allow running tests as - - - - --- 2023-09-04 Thomas Haller pablo Changes Requested
[nft,v3,08/11] tests/shell: move the dump diff handling inside "test-wrapper.sh" tests/shell: allow running tests as - - - - --- 2023-09-04 Thomas Haller pablo Changes Requested
[nft,v3,07/11] tests/shell: support --keep-logs option (NFT_TEST_KEEP_LOGS=y) to preserve test outp… tests/shell: allow running tests as - - - - --- 2023-09-04 Thomas Haller pablo Changes Requested
[nft,v3,06/11] tests/shell: interpret an exit code of 77 from scripts as "skipped" tests/shell: allow running tests as - - - - --- 2023-09-04 Thomas Haller pablo Changes Requested
[nft,v3,05/11] tests/shell: run each test in separate namespace and allow rootless tests/shell: allow running tests as - - - - --- 2023-09-04 Thomas Haller pablo Changes Requested
[nft,v3,04/11] tests/shell: export NFT_TEST_BASEDIR and NFT_TEST_TMPDIR for tests tests/shell: allow running tests as - - - - --- 2023-09-04 Thomas Haller pablo Changes Requested
[nft,v3,03/11] tests/shell: check test names before start and support directories tests/shell: allow running tests as - - - - --- 2023-09-04 Thomas Haller pablo Changes Requested
[nft,v3,02/11] tests/shell: rework finding tests and add "--list-tests" option tests/shell: allow running tests as - - - - --- 2023-09-04 Thomas Haller pablo Changes Requested
[nft,v3,01/11] tests/shell: rework command line parsing in "run-tests.sh" tests/shell: allow running tests as - - - - --- 2023-09-04 Thomas Haller pablo Changes Requested
[libnetfilter_log] libipulog: remove debugging printfs [libnetfilter_log] libipulog: remove debugging printfs - 1 - - --- 2023-09-03 Jeremy Sowden pablo Accepted
[nft] doc: describe behaviour of {ip,ip6} length [nft] doc: describe behaviour of {ip,ip6} length - - - - --- 2023-09-03 Pablo Neira Ayuso pablo Accepted
[nft,v2] evaluate: revisit anonymous set with single element optimization [nft,v2] evaluate: revisit anonymous set with single element optimization - 1 - - --- 2023-09-02 Pablo Neira Ayuso pablo Accepted
[nft] evaluate: revisit anonymous set with single element optimization [nft] evaluate: revisit anonymous set with single element optimization - 1 - - --- 2023-09-02 Pablo Neira Ayuso pablo Changes Requested
[nft,v2,3/3] tests/shell: run each test in separate namespace and allow rootless tests/shell: allow running tests as non-root - - - - --- 2023-09-01 Thomas Haller pablo Changes Requested
« 1 2 3 4 … 285 286 »