Pablo Neira Ayuso e570ac195d netfilter: nftables: add nft_parse_register_load() and use it ...

[ 4f16d25c68ec844299a4df6ecbb0234eaf88a935 ]

This new function combines the netlink register attribute parser
and the load validation function.

This update requires to replace:

	enum nft_registers      sreg:8;

in many of the expression private areas otherwise compiler complains
with:

	error: cannot take address of bit-field ‘sreg’

when passing the register field as reference.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-05-30 12:42:12 +01:00

..

arp_tables.c

netfilter: x_tables: fix compat match/target pad out-of-bound write

2021-04-16 11:49:31 +02:00

arpt_mangle.c

…

arptable_filter.c

…

ip_tables.c

netfilter: x_tables: fix compat match/target pad out-of-bound write

2021-04-16 11:49:31 +02:00

ipt_ah.c

…

ipt_CLUSTERIP.c

netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check()

2022-01-27 09:04:20 +01:00

ipt_ECN.c

…

ipt_MASQUERADE.c

…

ipt_REJECT.c

…

ipt_rpfilter.c

netfilter: rpfilter: mask ecn bits before fib lookup

2021-01-27 11:05:42 +01:00

ipt_SYNPROXY.c

netfilter: use actual socket sk rather than skb sk when routing harder

2020-11-18 19:18:44 +01:00

iptable_filter.c

…

iptable_mangle.c

netfilter: use actual socket sk rather than skb sk when routing harder

2020-11-18 19:18:44 +01:00

iptable_nat.c

…

iptable_raw.c

…

iptable_security.c

…

Kconfig

…

Makefile

…

nf_defrag_ipv4.c

…

nf_dup_ipv4.c

…

nf_flow_table_ipv4.c

…

nf_log_arp.c

netfilter: nf_log: missing vlan offload tag and proto

2020-10-29 09:55:15 +01:00

nf_log_ipv4.c

netfilter: nf_log: missing vlan offload tag and proto

2020-10-29 09:55:15 +01:00

nf_nat_h323.c

…

nf_nat_l3proto_ipv4.c

netfilter: use actual socket sk rather than skb sk when routing harder

2020-11-18 19:18:44 +01:00

nf_nat_masquerade_ipv4.c

netfilter: masquerade: don't flush all conntracks if only one address deleted on device

2019-11-20 18:47:52 +01:00

nf_nat_pptp.c

netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code

2020-06-03 08:19:47 +02:00

nf_nat_proto_gre.c

…

nf_nat_proto_icmp.c

…

nf_nat_snmp_basic_main.c

netfilter: nf_nat_snmp_basic: add missing length checks in ASN.1 cbs

2019-02-23 09:07:27 +01:00

nf_nat_snmp_basic.asn1

…

nf_reject_ipv4.c

netfilter: use actual socket sk rather than skb sk when routing harder

2020-11-18 19:18:44 +01:00

nf_socket_ipv4.c

…

nf_tproxy_ipv4.c

…

nft_chain_nat_ipv4.c

…

nft_chain_route_ipv4.c

netfilter: use actual socket sk rather than skb sk when routing harder

2020-11-18 19:18:44 +01:00

nft_dup_ipv4.c

netfilter: nftables: add nft_parse_register_load() and use it

2023-05-30 12:42:12 +01:00

nft_fib_ipv4.c

netfilter: nft_fib: Fix for rpath check with VRF devices

2022-10-26 13:19:25 +02:00

nft_masq_ipv4.c

…

nft_redir_ipv4.c

…

nft_reject_ipv4.c

…