github-mirror/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-10-07 02:56:02 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity Graph
7addb4e5ef
linux/net/netfilter
History
Ilya Maximets 7a099b347f netfilter: report NLM_F_DUMP_FILTERED when all is filtered out 
NLM_F_DUMP_FILTERED is only set on data elements in the conntrack dump.
But when everything is filtered out it is confusing for the user space,
since the flag is not reported anymore and it looks like the table was
empty, which may or may not be the case.

'answer_flags' were introduced precisely for this use case, and the
conntrack dump should set the flag in there in case the filtering was
applied.

This is important, for example, to be able to tell if the filters are
supported or not by the kernel without modifying the kernel state.

With the proper reporting of NLM_F_DUMP_FILTERED on NLMSG_DONE, an
application in user space can just try and dump with an arbitrary
filter without worrying that there could be no matching entry.  The
reported flag will signal that the filtering was applied and therefore
supported.

Fixes: cb8aa9a3af ("netfilter: ctnetlink: add kernel side filtering for dump")
Cc: stable@vger.kernel.org
Signed-off-by: Ilya Maximets <i.maximets@ovn.org>
Reviewed-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2026-09-07 18:48:56 +02:00
..
ipset netfilter: ipset: remove need to allocate memory on delete operations 2026-08-18 00:52:22 +02:00
ipvs ipvs: fix reversed sequence option serialization 2026-09-03 01:39:27 +02:00
core.c netfilter: remove nf_ipv6_ops and use direct function calls 2026-03-29 11:21:24 -07:00
Kconfig netfilter: arp_tables: remove the 32bit compat interface 2026-09-07 18:48:52 +02:00
Makefile netfilter: allow nfnetlink built-in only 2026-05-24 22:55:47 +02:00
nf_bpf_link.c netfilter: bpf: defer hook memory release until rcu readers are done 2026-03-19 10:26:31 +01:00
nf_conncount.c netfilter: conncount: use DEBUG_NET_WARN_ON_ONCE on reaching count limit 2026-08-27 14:11:40 +02:00
nf_conntrack_acct.c
nf_conntrack_amanda.c netfilter: conntrack_helper: pass master conntrack to helper functions 2026-07-24 11:45:19 +02:00
nf_conntrack_bpf.c bpf: Fix netns reference imbalance in conntrack kfuncs 2026-08-01 20:45:24 +02:00
nf_conntrack_broadcast.c netfilter: nf_conntrack_expect: store event cache in expectation 2026-07-24 11:45:19 +02:00
nf_conntrack_core.c netfilter: add DEBUG_NET_WARN_ON_ONCE to skb_set_nfct() 2026-08-10 13:01:37 +02:00
nf_conntrack_ecache.c netfilter: nf_conntrack_expect: store event cache in expectation 2026-07-24 11:45:19 +02:00
nf_conntrack_expect.c netfilter: nf_conntrack_expect: consolidate check for insertion of dead expectation 2026-08-18 00:54:40 +02:00
nf_conntrack_extend.c netfilter: conntrack: revert ct extension genid infrastructure 2026-06-05 16:16:44 +02:00
nf_conntrack_ftp.c netfilter: conntrack_helper: pass master conntrack to helper functions 2026-07-24 11:45:19 +02:00
nf_conntrack_h323_asn1.c netfilter: nf_conntrack_h323: Correct indentation when H323_TRACE defined 2026-04-08 07:51:31 +02:00
nf_conntrack_h323_main.c netfilter: conntrack: remove obsolete module parameters 2026-07-02 12:17:14 +02:00
nf_conntrack_h323_types.c
nf_conntrack_helper.c netfilter: nft_ct: move custom expectation support to helper 2026-08-10 13:03:15 +02:00
nf_conntrack_irc.c netfilter: conntrack_helper: pass master conntrack to helper functions 2026-07-24 11:45:19 +02:00
nf_conntrack_labels.c netfilter: conntrack: switch connlabels to atomic_t 2023-10-24 13:16:30 +02:00
nf_conntrack_netbios_ns.c netfilter: conntrack: remove obsolete module parameters 2026-07-02 12:17:14 +02:00
nf_conntrack_netlink.c netfilter: report NLM_F_DUMP_FILTERED when all is filtered out 2026-09-07 18:48:56 +02:00
nf_conntrack_ovs.c netfilter: conntrack: get rid of tuple in helper definitions 2026-07-02 12:17:14 +02:00
nf_conntrack_pptp.c netfilter: conntrack: remove obsolete module parameters 2026-07-02 12:17:14 +02:00
nf_conntrack_proto_generic.c netfilter: nf_conntrack: Add allow_clash to generic protocol handler 2026-01-20 16:23:37 +01:00
nf_conntrack_proto_gre.c netfilter: conntrack: check NULL when retrieving ct extension 2026-06-14 12:51:55 +02:00
nf_conntrack_proto_icmp.c netfilter: nf_conntrack: enable icmp clash support 2026-01-20 16:23:37 +01:00
nf_conntrack_proto_icmpv6.c netfilter: nf_conntrack: enable icmp clash support 2026-01-20 16:23:37 +01:00
nf_conntrack_proto_sctp.c netfilter: nf_conntrack: defer invalid log until after unlock 2026-08-10 20:25:56 +02:00
nf_conntrack_proto_tcp.c netfilter pull request 26-08-10 2026-08-14 12:23:12 -07:00
nf_conntrack_proto_udp.c udp: Support BIG TCP GSO packets where they can occur 2026-07-22 13:47:02 +02:00
nf_conntrack_proto.c netfilter: nf_conntrack: defer invalid log until after unlock 2026-08-10 20:25:56 +02:00
nf_conntrack_sane.c netfilter: conntrack: remove obsolete module parameters 2026-07-02 12:17:14 +02:00
nf_conntrack_seqadj.c netfilter: conntrack: check NULL when retrieving ct extension 2026-06-14 12:51:55 +02:00
nf_conntrack_sip.c netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() 2026-09-03 01:39:27 +02:00
nf_conntrack_snmp.c netfilter: conntrack: remove obsolete module parameters 2026-07-02 12:17:14 +02:00
nf_conntrack_standalone.c net: Const qualify ctl_tables that kmemdup unconditionally 2026-08-13 13:12:24 +02:00
nf_conntrack_tftp.c netfilter: conntrack_helper: pass master conntrack to helper functions 2026-07-24 11:45:19 +02:00
nf_conntrack_timeout.c netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount 2026-06-05 13:11:55 +02:00
nf_conntrack_timestamp.c
nf_dup_netdev.c netfilter pull request 26-06-14 2026-06-15 14:09:57 -07:00
nf_flow_table_bpf.c bpf: Remove redundant KF_TRUSTED_ARGS flag from all kfuncs 2026-01-02 12:04:28 -08:00
nf_flow_table_core.c Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net 2026-08-13 11:00:14 -07:00
nf_flow_table_inet.c net: netfilter: move nf flowtable bpf initialization in nf_flow_table_module_init() 2024-09-12 15:41:03 +02:00
nf_flow_table_ip.c netfilter: flowtable: detach layer 2 encapsulation parser from lookup 2026-08-10 13:03:08 +02:00
nf_flow_table_offload.c netfilter: flowtable: IPIP tunnel hardware offload is not yet support 2026-07-08 15:33:44 +02:00
nf_flow_table_path.c netfilter: flowtable: rename tun.l3_proto to tun.inner_proto 2026-08-10 13:02:37 +02:00
nf_flow_table_procfs.c
nf_flow_table_xdp.c treewide: Replace kmalloc with kmalloc_obj for non-scalar types 2026-02-21 01:02:28 -08:00
nf_hooks_lwtunnel.c net: Const qualify network templated ctl_tables Arrays 2026-08-13 13:12:24 +02:00
nf_internals.h netfilter: move the sysctl nf_hooks_lwtunnel into the netfilter core 2024-06-19 18:41:59 +02:00
nf_log_syslog.c netfilter: nf_log: unregister loggers before per-net teardown 2026-09-03 01:39:27 +02:00
nf_log.c treewide: Replace kmalloc with kmalloc_obj for non-scalar types 2026-02-21 01:02:28 -08:00
nf_nat_amanda.c netfilter: conntrack_helper: pass master conntrack to helper functions 2026-07-24 11:45:19 +02:00
nf_nat_bpf.c bpf: Remove redundant KF_TRUSTED_ARGS flag from all kfuncs 2026-01-02 12:04:28 -08:00
nf_nat_core.c netfilter: nfnetlink_hook: Dump nat type chains 2026-07-02 12:17:14 +02:00
nf_nat_ftp.c netfilter: conntrack_helper: pass master conntrack to helper functions 2026-07-24 11:45:19 +02:00
nf_nat_helper.c net: Use helpers to get/set UDP len tree-wide 2026-07-22 13:47:02 +02:00
nf_nat_irc.c netfilter: conntrack_helper: pass master conntrack to helper functions 2026-07-24 11:45:19 +02:00
nf_nat_masquerade.c netfilter: remove nf_ipv6_ops and use direct function calls 2026-03-29 11:21:24 -07:00
nf_nat_ovs.c netfilter: nf_conntrack: don't rely on implicit includes 2026-01-20 16:23:37 +01:00
nf_nat_proto.c netfilter: nfnetlink_hook: Dump nat type chains 2026-07-02 12:17:14 +02:00
nf_nat_redirect.c netfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses 2023-11-08 16:40:30 +01:00
nf_nat_sip.c Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net 2026-07-30 12:53:19 -07:00
nf_nat_tftp.c netfilter: conntrack_helper: pass master conntrack to helper functions 2026-07-24 11:45:19 +02:00
nf_queue.c netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst 2026-06-19 12:19:58 +02:00
nf_sockopt.c
nf_synproxy_core.c netfilter: synproxy: fix unaligned memory access in timestamp adjustment 2026-06-05 13:11:55 +02:00
nf_tables_api.c netfilter: nf_tables: remove leftover set_update_list 2026-08-27 16:10:57 +02:00
nf_tables_core.c netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths 2026-06-14 12:50:01 +02:00
nf_tables_offload.c netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path 2026-08-10 20:27:29 +02:00
nf_tables_trace.c netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths 2026-06-14 12:50:01 +02:00
nfnetlink_acct.c netfilter: add more netlink-based policy range checks 2026-04-08 07:51:30 +02:00
nfnetlink_cthelper.c Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net 2026-07-10 10:20:05 +02:00
nfnetlink_cttimeout.c netfilter: cttimeout: prevent UAF during module unload 2026-09-03 01:39:27 +02:00
nfnetlink_hook.c netfilter: nfnetlink_hook: Dump nat type chains 2026-07-02 12:17:14 +02:00
nfnetlink_log.c netfilter: nfnetlink_log: cope with concurrent instance destruction 2026-09-07 18:43:16 +02:00
nfnetlink_osf.c netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures 2026-06-05 13:11:54 +02:00
nfnetlink_queue.c netfilter: validate L4 headers after userspace packet writes 2026-08-18 00:51:40 +02:00
nfnetlink.c net: Add SPDX ids to some source files 2026-03-09 18:32:45 -07:00
nft_bitwise.c netfilter: nf_tables: fix dst corruption in same register operation 2026-05-22 12:28:46 +02:00
nft_byteorder.c netfilter: nft_byteorder: remove multi-register support 2026-06-01 13:43:53 +02:00
nft_chain_filter.c Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net 2026-03-12 12:53:34 -07:00
nft_chain_nat.c netfilter: add missing module descriptions 2023-11-08 13:52:32 +01:00
nft_chain_route.c
nft_cmp.c netfilter: nf_tables: add netlink policy based cap on registers 2026-04-08 07:51:31 +02:00
nft_compat.c netfilter: nft_compat: ebtables emulation must reject non-bridge targets 2026-06-23 08:11:22 +02:00
nft_connlimit.c netfilter: add more netlink-based policy range checks 2026-04-08 07:51:30 +02:00
nft_counter.c netfilter: nf_tables: remove register tracking infrastructure 2026-02-25 19:36:26 -08:00
nft_ct_fast.c netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths 2026-06-14 12:50:01 +02:00
nft_ct.c netfilter: nft_ct: move custom expectation support to helper 2026-08-10 13:03:15 +02:00
nft_dup_netdev.c netfilter: nf_tables: remove register tracking infrastructure 2026-02-25 19:36:26 -08:00
nft_dynset.c netfilter: nf_tables: skip double clone set expressions on element insert 2026-08-27 16:10:57 +02:00
nft_exthdr.c netfilter pull request 26-06-14 2026-06-15 14:09:57 -07:00
nft_fib_inet.c netfilter: nf_tables: remove register tracking infrastructure 2026-02-25 19:36:26 -08:00
nft_fib_netdev.c netfilter: nft_fib: reject fib expression on the netdev egress hook 2026-06-30 06:37:12 +02:00
nft_fib.c netfilter: nft_fib: reject fib expression on the netdev egress hook 2026-06-30 06:37:12 +02:00
nft_flow_offload.c netfilter: nf_tables: remove register tracking infrastructure 2026-02-25 19:36:26 -08:00
nft_fwd_netdev.c netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them 2026-06-14 13:07:03 +02:00
nft_hash.c netfilter: nf_tables: add netlink policy based cap on registers 2026-04-08 07:51:31 +02:00
nft_immediate.c netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it 2026-04-08 07:51:31 +02:00
nft_inner.c netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths 2026-06-14 12:50:01 +02:00
nft_last.c Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net 2026-02-26 10:23:00 -08:00
nft_limit.c netfilter: add more netlink-based policy range checks 2026-04-08 07:51:30 +02:00
nft_log.c netfilter: add more netlink-based policy range checks 2026-04-08 07:51:30 +02:00
nft_lookup.c netfilter: nft_lookup: fix catchall element handling with inverted lookups 2026-07-08 15:33:37 +02:00
nft_masq.c netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths 2026-06-14 12:50:01 +02:00
nft_meta.c netfilter: nf_tables: call skb_valid_dst() before skb_dst() 2026-07-31 14:47:03 +02:00
nft_nat.c netfilter: nf_tables: remove register tracking infrastructure 2026-02-25 19:36:26 -08:00
nft_numgen.c netfilter: nf_tables: add netlink policy based cap on registers 2026-04-08 07:51:31 +02:00
nft_objref.c netfilter: nf_tables: add netlink policy based cap on registers 2026-04-08 07:51:31 +02:00
nft_osf.c netfilter: nf_tables: skip L4 header parsing for non-first fragments 2026-04-30 17:59:01 +02:00
nft_payload.c netfilter: validate L4 headers after userspace packet writes 2026-08-18 00:51:40 +02:00
nft_queue.c netfilter: add more netlink-based policy range checks 2026-04-08 07:51:30 +02:00
nft_quota.c netfilter: add more netlink-based policy range checks 2026-04-08 07:51:30 +02:00
nft_range.c netfilter: nf_tables: add netlink policy based cap on registers 2026-04-08 07:51:31 +02:00
nft_redir.c netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths 2026-06-14 12:50:01 +02:00
nft_reject_inet.c netfilter: nf_tables: remove register tracking infrastructure 2026-02-25 19:36:26 -08:00
nft_reject_netdev.c netfilter: nf_tables: remove register tracking infrastructure 2026-02-25 19:36:26 -08:00
nft_reject.c netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths 2026-06-14 12:50:01 +02:00
nft_rt.c netfilter: nf_tables: call skb_valid_dst() before skb_dst() 2026-07-31 14:47:03 +02:00
nft_set_bitmap.c netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation 2025-09-10 20:28:24 +02:00
nft_set_hash.c netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths 2026-06-14 12:50:01 +02:00
nft_set_pipapo_avx2.c netfilter: nft_set_pipapo_avx2: add missing vzeroupper 2026-08-27 16:10:57 +02:00
nft_set_pipapo_avx2.h netfilter: nft_set_pipapo: use avx2 algorithm for insertions too 2025-08-20 13:52:37 +02:00
nft_set_pipapo.c netfilter: nft_set_pipapo: don't leak bad clone into future transaction 2026-06-30 06:37:07 +02:00
nft_set_pipapo.h netfilter: nft_set_pipapo: don't leak bad clone into future transaction 2026-06-30 06:37:07 +02:00
nft_set_rbtree.c Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net 2026-07-10 10:20:05 +02:00
nft_socket.c netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths 2026-06-14 12:50:01 +02:00
nft_synproxy.c netfilter: nft_synproxy: stop bypassing the priv->info snapshot 2026-06-23 08:11:22 +02:00
nft_tproxy.c netfilter: nf_tables: skip L4 header parsing for non-first fragments 2026-04-30 17:59:01 +02:00
nft_tunnel.c netfilter: nf_tables: use DEBUG_NET_WARN_ON_ONCE in packet and control paths 2026-06-14 12:50:01 +02:00
nft_xfrm.c netfilter: nf_tables: call skb_valid_dst() before skb_dst() 2026-07-31 14:47:03 +02:00
utils.c netfilter: remove nf_ipv6_ops and use direct function calls 2026-03-29 11:21:24 -07:00
x_tables.c netfilter: x_tables: replace strlcat() with snprintf() 2026-07-02 12:17:14 +02:00
xt_addrtype.c netfilter: x_tables: add .check_hooks to matches and targets 2026-04-30 08:03:22 +02:00
xt_AUDIT.c audit: add audit_log_nf_skb helper function 2025-12-16 11:04:14 -05:00
xt_bpf.c
xt_cgroup.c netfilter: x_tables: replace pr_{info,err}() by pr_info_ratelimited() 2026-08-27 16:10:57 +02:00
xt_CHECKSUM.c netfilter: xtables: avoid NFPROTO_UNSPEC where needed 2024-10-09 23:20:46 +02:00
xt_CLASSIFY.c netfilter: xtables: avoid NFPROTO_UNSPEC where needed 2024-10-09 23:20:46 +02:00
xt_cluster.c netfilter: xt_cluster: reject template conntracks in hash match 2026-06-19 12:22:14 +02:00
xt_comment.c
xt_connbytes.c net: Add SPDX ids to some source files 2026-03-09 18:32:45 -07:00
xt_connlabel.c
xt_connlimit.c net: Add SPDX ids to some source files 2026-03-09 18:32:45 -07:00
xt_connmark.c netfilter: xt_connmark: reject invalid shift parameters 2026-07-03 14:45:21 +02:00
xt_CONNSECMARK.c netfilter: xtables: avoid NFPROTO_UNSPEC where needed 2024-10-09 23:20:46 +02:00
xt_conntrack.c
xt_cpu.c netfilter: xt_cpu: prefer raw_smp_processor_id 2026-05-22 12:28:46 +02:00
xt_CT.c netfilter: nf_conntrack_helper: add refcounting from datapath 2026-06-05 16:16:44 +02:00
xt_dccp.c netfilter: add deprecation warning for dccp support 2026-04-08 07:51:27 +02:00
xt_devgroup.c netfilter: x_tables: add .check_hooks to matches and targets 2026-04-30 08:03:22 +02:00
xt_dscp.c netfilter: xt_dscp: add checkentry for tos match 2026-07-02 12:17:14 +02:00
xt_DSCP.c
xt_ecn.c netfilter: xtables: fix L4 header parsing for non-first fragments 2026-04-30 17:59:01 +02:00
xt_esp.c netfilter: x_tables: remove pr_debug 2026-08-27 16:10:57 +02:00
xt_hashlimit.c netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH 2026-07-23 18:01:25 +02:00
xt_helper.c
xt_hl.c netfilter: x_tables: replace pr_{info,err}() by pr_info_ratelimited() 2026-08-27 16:10:57 +02:00
xt_HL.c
xt_HMARK.c
xt_IDLETIMER.c netfilter: x_tables: remove pr_debug 2026-08-27 16:10:57 +02:00
xt_ipcomp.c netfilter: x_tables: remove pr_debug 2026-08-27 16:10:57 +02:00
xt_iprange.c netfilter: x_tables: remove pr_debug 2026-08-27 16:10:57 +02:00
xt_ipvs.c netfilter: x_tables: remove pr_debug 2026-08-27 16:10:57 +02:00
xt_l2tp.c
xt_LED.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
xt_length.c
xt_limit.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
xt_LOG.c netfilter: x_tables: remove pr_debug 2026-08-27 16:10:57 +02:00
xt_mac.c netfilter: xtables: restrict several matches to inet family 2026-04-20 23:27:52 +02:00
xt_mark.c netfilter: xtables: support arpt_mark and ipv6 optstrip for iptables-nft only builds 2025-05-22 17:16:02 +02:00
xt_MASQUERADE.c netfilter: x_tables: remove pr_debug 2026-08-27 16:10:57 +02:00
xt_multiport.c netfilter: x_tables: remove pr_debug 2026-08-27 16:10:57 +02:00
xt_nat.c netfilter: xt_nat: reject unsupported target families 2026-07-10 16:28:47 +02:00
xt_NETMAP.c netfilter: x_tables: remove pr_debug 2026-08-27 16:10:57 +02:00
xt_nfacct.c netfilter: xt_nfacct: don't assume acct name is null-terminated 2025-07-25 18:40:43 +02:00
xt_NFLOG.c netfilter: xtables: fix typo causing some targets not to load on IPv6 2024-10-21 11:31:26 +02:00
xt_NFQUEUE.c netfilter: xt_NFQUEUE: prefer raw_smp_processor_id 2026-06-01 13:43:52 +02:00
xt_osf.c netfilter: xtables: fix L4 header parsing for non-first fragments 2026-04-30 17:59:01 +02:00
xt_owner.c netfilter: xtables: restrict several matches to inet family 2026-04-20 23:27:52 +02:00
xt_physdev.c netfilter: xt_physdev: masks are not c-strings 2026-07-10 16:28:47 +02:00
xt_pkttype.c
xt_policy.c netfilter: x_tables: add .check_hooks to matches and targets 2026-04-30 08:03:22 +02:00
xt_quota.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
xt_rateest.c netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() 2026-07-03 14:45:21 +02:00
xt_RATEEST.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
xt_realm.c netfilter: xtables: restrict several matches to inet family 2026-04-20 23:27:52 +02:00
xt_recent.c netfilter: avoid strcpy usage 2026-07-02 12:17:14 +02:00
xt_REDIRECT.c netfilter: x_tables: remove pr_debug 2026-08-27 16:10:57 +02:00
xt_repldata.h netfilter: xtables: Use strscpy() instead of strscpy_pad() 2025-03-23 10:53:47 +01:00
xt_sctp.c netfilter: x_tables: remove pr_debug 2026-08-27 16:10:57 +02:00
xt_SECMARK.c netfilter: xtables: avoid NFPROTO_UNSPEC where needed 2024-10-09 23:20:46 +02:00
xt_set.c netfilter: x_tables: add .check_hooks to matches and targets 2026-04-30 08:03:22 +02:00
xt_socket.c netfilter: xt_socket: enable defrag after all other checks 2026-04-10 12:16:26 +02:00
xt_state.c
xt_statistic.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
xt_string.c
xt_tcpmss.c netfilter: xt_tcpmss: extend checkentry to ipv6 2026-07-24 11:21:35 +02:00
xt_TCPMSS.c netfilter: x_tables: add .check_hooks to matches and targets 2026-04-30 08:03:22 +02:00
xt_TCPOPTSTRIP.c netfilter: replace u_int8_t and u_int16t with u8 and u16 2026-07-02 12:17:14 +02:00
xt_tcpudp.c netfilter: x_tables: remove pr_debug 2026-08-27 16:10:57 +02:00
xt_TEE.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
xt_time.c Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net 2026-03-19 14:16:00 -07:00
xt_TPROXY.c netfilter: xtables: fix L4 header parsing for non-first fragments 2026-04-30 17:59:01 +02:00
xt_TRACE.c netfilter: xtables: fix typo causing some targets not to load on IPv6 2024-10-21 11:31:26 +02:00
xt_u32.c netfilter: handle unreadable frags 2026-07-08 15:33:44 +02:00