net/ipv6/netfilter · kernel2 · Tangled

Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git

kernel2 net ipv6 netfilter

29 files

Florian Westphal · netfilter: handle unreadable frags · 3mo ago

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop

netfilter: require Ethernet MAC header before using eth_hdr()

netfilter: ip6tables: Remove redundant null checks

netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop

ip6t_ipv6header.c

netfilter: move inline nf_ip6_ext_hdr() function to a more appropriate header.

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

netfilter: ip6t_NPT: rewrite addresses in ICMPv6 original packet

netfilter: use actual socket sk for REJECT action

ip6t_rpfilter.c

netfilter: ip6t_rpfilter: Fix regression with VRF interfaces

netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

ip6t_SYNPROXY.c

netfilter: Add MODULE_DESCRIPTION entries to kernel modules

ip6table_filter.c

netfilter: x_tables: close dangling table module init race

ip6table_mangle.c

netfilter: x_tables: close dangling table module init race

netfilter: x_tables: add and use xtables_unregister_table_exit

netfilter: x_tables: close dangling table module init race

ip6table_security.c

netfilter: x_tables: close dangling table module init race

netfilter: add back NETFILTER_XTABLES dependencies

netfilter: add option for GCOV profiling

nf_conntrack_reasm.c

netfilter: handle unreadable frags

nf_defrag_ipv6_hooks.c

netfilter: add missing module descriptions

ipv6: adopt dst_dev() helper

nf_reject_ipv6.c

netfilter: nf_reject: don't reply to icmp error messages

nf_socket_ipv6.c

netfilter: nf_socket: skip socket lookup for non-first fragments

nf_tproxy_ipv6.c

tcp: Don't pass hashinfo to socket lookup helpers.

netfilter: nf_tables: remove register tracking infrastructure

netfilter: nft_fib: fix stale stack leak via the OIFNAME register

nft_reject_ipv6.c

netfilter: nf_tables: remove register tracking infrastructure