Florian Westphal c84ca954ac netfilter: x_tables: add counters allocation wrapper ...

allows to have size checks in a single spot.
This is supposed to reduce oom situations when fuzz-testing xtables.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

2018-03-05 23:15:43 +01:00

..

ip6_tables.c

netfilter: x_tables: add counters allocation wrapper

2018-03-05 23:15:43 +01:00

ip6t_ah.c

netfilter: ip6_tables: add flags parameter to ipv6_find_hdr()

2012-05-09 12:53:47 +02:00

ip6t_eui64.c

netfilter: xtables: change hotdrop pointer to direct modification

2010-05-11 18:35:27 +02:00

ip6t_frag.c

netfilter: ip6_tables: add flags parameter to ipv6_find_hdr()

2012-05-09 12:53:47 +02:00

ip6t_hbh.c

netfilter: ip6_tables: add flags parameter to ipv6_find_hdr()

2012-05-09 12:53:47 +02:00

ip6t_ipv6header.c

netfilter: remove unnecessary break after return

2014-07-15 16:27:00 -07:00

ip6t_MASQUERADE.c

netfilter: ip6t_MASQUERADE: add dependency on conntrack module

2017-12-11 17:04:50 +01:00

ip6t_mh.c

netfilter: xtables: change hotdrop pointer to direct modification

2010-05-11 18:35:27 +02:00

ip6t_NPT.c

xtables: extend matches and targets with .usersize

2017-01-09 17:24:55 +01:00

ip6t_REJECT.c

netfilter: x_tables: use pr ratelimiting in all remaining spots

2018-02-14 21:05:38 +01:00

ip6t_rpfilter.c

net/ipv6: Pass skb to route lookup

2018-03-04 13:04:22 -05:00

ip6t_rt.c

netfilter: ip6_tables: add flags parameter to ipv6_find_hdr()

2012-05-09 12:53:47 +02:00

ip6t_srh.c

netfilter: x_tables: use pr ratelimiting in all remaining spots

2018-02-14 21:05:38 +01:00

ip6t_SYNPROXY.c

netfilter: SYNPROXY: skip non-tcp packet in {ipv4, ipv6}_synproxy_hook

2017-10-09 13:08:39 +02:00

ip6table_filter.c

netfilter: xtables: don't hook tables by default

2016-03-02 20:05:24 +01:00

ip6table_mangle.c

netfilter: remove defensive check on malformed packets from raw sockets

2018-01-08 18:11:04 +01:00

ip6table_nat.c

netfilter: core: only allow one nat hook per hook point

2018-01-08 18:01:13 +01:00

ip6table_raw.c

netfilter: nf_defrag: mark xt_table structures 'const' again

2018-01-16 01:52:07 +01:00

ip6table_security.c

netfilter: xtables: don't hook tables by default

2016-03-02 20:05:24 +01:00

Kconfig

netfilter: flowtable infrastructure depends on NETFILTER_INGRESS

2018-02-02 13:21:48 +01:00

Makefile

netfilter: add IPv6 segment routing header 'srh' match

2018-01-10 16:28:44 +01:00

nf_conntrack_l3proto_ipv6.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf

2018-02-01 14:41:46 -05:00

nf_conntrack_proto_icmpv6.c

netfilter: conntrack: timeouts can be const

2018-01-08 18:01:02 +01:00

nf_conntrack_reasm.c

netfilter: ipv6: nf_defrag: Kill frag queue on RFC2460 failure

2018-02-02 12:45:17 +01:00

nf_defrag_ipv6_hooks.c

net: Convert defrag6_net_ops

2018-02-27 11:01:39 -05:00

nf_dup_ipv6.c

netfilter: kill the fake untracked conntrack objects

2017-04-15 11:47:57 +02:00

nf_flow_table_ipv6.c

netfilter: nf_tables: fix flowtable free

2018-02-07 00:58:57 +01:00

nf_log_ipv6.c

net: Convert log pernet_operations

2018-03-05 10:48:27 -05:00

nf_nat_l3proto_ipv6.c

netfilter: remove defensive check on malformed packets from raw sockets

2018-01-08 18:11:04 +01:00

nf_nat_masquerade_ipv6.c

net: Replace NF_CT_ASSERT() with WARN_ON().

2017-09-04 13:25:19 +02:00

nf_nat_proto_icmpv6.c

net: Change pseudohdr argument of inet_proto_csum_replace* to be a bool

2015-08-17 21:33:06 -07:00

nf_reject_ipv6.c

networking: make skb_put & friends return void pointers

2017-06-16 11:48:39 -04:00

nf_socket_ipv6.c

netfilter: move socket lookup infrastructure to nf_socket_ipv{4,6}.c

2016-11-01 20:50:31 +01:00

nf_tables_ipv6.c

netfilter: nf_tables: get rid of struct nft_af_info abstraction

2018-01-10 15:32:11 +01:00

nft_chain_nat_ipv6.c

netfilter: nf_tables: explicit nft_set_pktinfo() call from hook path

2018-01-08 18:01:15 +01:00

nft_chain_route_ipv6.c

netfilter: nf_tables: explicit nft_set_pktinfo() call from hook path

2018-01-08 18:01:15 +01:00

nft_dup_ipv6.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2016-11-15 10:54:36 -05:00

nft_fib_ipv6.c

net/ipv6: Pass skb to route lookup

2018-03-04 13:04:22 -05:00

nft_masq_ipv6.c

netfilter: nf_tables: fix mismatch in big-endian system

2017-03-13 13:30:28 +01:00

nft_redir_ipv6.c

netfilter: nf_tables: fix mismatch in big-endian system

2017-03-13 13:30:28 +01:00

nft_reject_ipv6.c

netfilter: nf_tables: use hook state from xt_action_param structure

2016-11-03 11:52:34 +01:00