Jakub Kicinski fd2a55e74a Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf ... Pablo Neira Ayuso says: ==================== Netfilter fixes for net 1) Fix broken listing of set elements when table has an owner. 2) Fix conntrack refcount leak in ctnetlink with related conntrack entries, from Hangyu Hua. 3) Fix use-after-free/double-free in ctnetlink conntrack insert path, from Florian Westphal. 4) Fix ip6t_rpfilter with VRF, from Phil Sutter. 5) Fix use-after-free in ebtables reported by syzbot, also from Florian. 6) Use skb->len in xt_length to deal with IPv6 jumbo packets, from Xin Long. 7) Fix NETLINK_LISTEN_ALL_NSID with ctnetlink, from Florian Westphal. 8) Fix memleak in {ip_,ip6_,arp_}tables in ENOMEM error case, from Pavel Tikhomirov. * git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf: netfilter: x_tables: fix percpu counter block leak on error path when creating new netns netfilter: ctnetlink: make event listener tracking global netfilter: xt_length: use skb len to match in length_mt6 netfilter: ebtables: fix table blob use-after-free netfilter: ip6t_rpfilter: Fix regression with VRF interfaces netfilter: conntrack: fix rmmod double-free race netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() netfilter: nf_tables: allow to fetch set elements when table has an owner ==================== Link: https://lore.kernel.org/r/20230222092137.88637-1-pablo@netfilter.org Signed-off-by: Jakub Kicinski <kuba@kernel.org>		2023-02-22 21:25:23 -08:00
..
ipset	net: Kconfig: fix spellos	2023-01-25 22:39:56 -08:00
ipvs	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next	2023-02-20 10:53:56 +00:00
core.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf	2023-02-22 21:25:23 -08:00
Kconfig	net: create nf_conntrack_ovs for ovs and tc use	2023-02-10 16:23:03 -08:00
Makefile	net: create nf_conntrack_ovs for ovs and tc use	2023-02-10 16:23:03 -08:00
nf_conncount.c
nf_conntrack_acct.c
nf_conntrack_amanda.c
nf_conntrack_bpf.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf	2023-02-22 21:25:23 -08:00
nf_conntrack_broadcast.c
nf_conntrack_core.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf	2023-02-22 21:25:23 -08:00
nf_conntrack_ecache.c	netfilter: ctnetlink: make event listener tracking global	2023-02-22 00:28:47 +01:00
nf_conntrack_expect.c
nf_conntrack_extend.c
nf_conntrack_ftp.c
nf_conntrack_h323_asn1.c
nf_conntrack_h323_main.c
nf_conntrack_h323_types.c
nf_conntrack_helper.c	net: create nf_conntrack_ovs for ovs and tc use	2023-02-10 16:23:03 -08:00
nf_conntrack_irc.c
nf_conntrack_labels.c
nf_conntrack_netbios_ns.c
nf_conntrack_netlink.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf	2023-02-22 21:25:23 -08:00
nf_conntrack_ovs.c	net: extract nf_ct_handle_fragments to nf_conntrack_ovs	2023-02-10 16:23:03 -08:00
nf_conntrack_pptp.c
nf_conntrack_proto.c	netfilter: conntrack: remove pr_debug calls	2023-01-18 13:05:24 +01:00
nf_conntrack_proto_dccp.c
nf_conntrack_proto_generic.c
nf_conntrack_proto_gre.c
nf_conntrack_proto_icmp.c
nf_conntrack_proto_icmpv6.c	netfilter: conntrack: set icmpv6 redirects as RELATED	2022-11-30 23:01:20 +01:00
nf_conntrack_proto_sctp.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2023-02-02 14:49:55 -08:00
nf_conntrack_proto_tcp.c	netfilter: let reset rules clean out conntrack entries	2023-02-17 13:04:56 +01:00
nf_conntrack_proto_udp.c	netfilter: conntrack: udp: fix seen-reply test	2023-02-01 12:18:51 +01:00
nf_conntrack_sane.c
nf_conntrack_seqadj.c
nf_conntrack_sip.c
nf_conntrack_snmp.c
nf_conntrack_standalone.c	netfilter: conntrack: remote a return value of the 'seq_print_acct' function.	2023-02-01 12:18:52 +01:00
nf_conntrack_tftp.c
nf_conntrack_timeout.c
nf_conntrack_timestamp.c
nf_dup_netdev.c
nf_flow_table_core.c	netfilter: flowtable: fixup UDP timeout depending on ct state	2023-02-03 09:31:24 +00:00
nf_flow_table_inet.c	netfilter: flowtable: cache info of last offload	2023-02-03 09:31:24 +00:00
nf_flow_table_ip.c	netfilter: flowtable: add a 'default' case to flowtable datapath	2022-12-08 22:11:00 +01:00
nf_flow_table_offload.c	netfilter: flowtable: cache info of last offload	2023-02-03 09:31:24 +00:00
nf_flow_table_procfs.c
nf_hooks_lwtunnel.c
nf_internals.h
nf_log.c
nf_log_syslog.c	netfilter: use skb_ip_totlen and iph_totlen	2023-02-01 20:54:27 -08:00
nf_nat_amanda.c
nf_nat_bpf.c	bpf: Add __bpf_kfunc tag to all kfuncs	2023-02-02 00:25:14 +01:00
nf_nat_core.c
nf_nat_ftp.c
nf_nat_helper.c	treewide: use get_random_u32_below() instead of deprecated function	2022-11-18 02:15:15 +01:00
nf_nat_irc.c
nf_nat_masquerade.c
nf_nat_ovs.c	net: move the nat function to nf_nat_ovs for ovs and tc	2022-12-12 10:14:03 +00:00
nf_nat_proto.c
nf_nat_redirect.c
nf_nat_sip.c
nf_nat_tftp.c
nf_queue.c
nf_sockopt.c
nf_synproxy_core.c
nf_tables_api.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf	2023-02-22 21:25:23 -08:00
nf_tables_core.c	netfilter: nf_tables: avoid retpoline overhead for some ct expression calls	2023-01-18 13:05:25 +01:00
nf_tables_offload.c
nf_tables_trace.c
nfnetlink.c	netfilter: ctnetlink: make event listener tracking global	2023-02-22 00:28:47 +01:00
nfnetlink_acct.c
nfnetlink_cthelper.c
nfnetlink_cttimeout.c
nfnetlink_hook.c
nfnetlink_log.c
nfnetlink_osf.c
nfnetlink_queue.c
nft_bitwise.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_byteorder.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_chain_filter.c
nft_chain_nat.c
nft_chain_route.c
nft_cmp.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_compat.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_connlimit.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_counter.c	netfilter: nf_tables: Introduce NFT_MSG_GETRULE_RESET	2022-11-15 10:53:17 +01:00
nft_ct.c	netfilter: nf_tables: avoid retpoline overhead for some ct expression calls	2023-01-18 13:05:25 +01:00
nft_ct_fast.c	netfilter: nf_tables: avoid retpoline overhead for some ct expression calls	2023-01-18 13:05:25 +01:00
nft_dup_netdev.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_dynset.c	netfilter: nf_tables: Introduce NFT_MSG_GETRULE_RESET	2022-11-15 10:53:17 +01:00
nft_exthdr.c	sctp: move SCTP_PAD4 and SCTP_TRUNC4 to linux/sctp.h	2022-11-17 21:43:34 -08:00
nft_fib.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_fib_inet.c
nft_fib_netdev.c
nft_flow_offload.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_fwd_netdev.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_hash.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_immediate.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_inner.c	netfilter: nf_tables: Introduce NFT_MSG_GETRULE_RESET	2022-11-15 10:53:17 +01:00
nft_last.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_limit.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_log.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_lookup.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_masq.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_meta.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_nat.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_numgen.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_objref.c	netfilter: nf_tables: avoid retpoline overhead for objref calls	2023-01-18 13:05:25 +01:00
nft_osf.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_payload.c	netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits	2023-01-11 19:18:04 +01:00
nft_queue.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_quota.c	netfilter: nf_tables: Introduce NFT_MSG_GETRULE_RESET	2022-11-15 10:53:17 +01:00
nft_range.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_redir.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_reject.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_reject_inet.c
nft_reject_netdev.c
nft_rt.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_set_bitmap.c
nft_set_hash.c
nft_set_pipapo.c	netfilter: nft_set_pipapo: Actually validate intervals in fields after the first one	2022-11-28 13:17:11 +01:00
nft_set_pipapo.h
nft_set_pipapo_avx2.c
nft_set_pipapo_avx2.h
nft_set_rbtree.c	netfilter: nft_set_rbtree: skip elements in transaction from garbage collection	2023-01-23 21:38:33 +01:00
nft_socket.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_synproxy.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_tproxy.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_tunnel.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_xfrm.c	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
utils.c
x_tables.c
xt_addrtype.c
xt_AUDIT.c
xt_bpf.c
xt_cgroup.c
xt_CHECKSUM.c
xt_CLASSIFY.c
xt_cluster.c
xt_comment.c
xt_connbytes.c
xt_connlabel.c
xt_connlimit.c
xt_connmark.c	netfilter: conntrack: Fix data-races around ct mark	2022-11-18 15:21:00 +01:00
xt_CONNSECMARK.c
xt_conntrack.c
xt_cpu.c
xt_CT.c
xt_dccp.c
xt_devgroup.c
xt_dscp.c
xt_DSCP.c
xt_ecn.c
xt_esp.c
xt_hashlimit.c
xt_helper.c
xt_hl.c
xt_HL.c
xt_HMARK.c
xt_IDLETIMER.c	treewide: Convert del_timer*() to timer_shutdown*()	2022-12-25 13:38:09 -08:00
xt_ipcomp.c
xt_iprange.c
xt_ipvs.c
xt_l2tp.c
xt_LED.c	treewide: Convert del_timer*() to timer_shutdown*()	2022-12-25 13:38:09 -08:00
xt_length.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf	2023-02-22 21:25:23 -08:00
xt_limit.c
xt_LOG.c
xt_mac.c
xt_mark.c
xt_MASQUERADE.c
xt_multiport.c
xt_nat.c
xt_NETMAP.c
xt_nfacct.c
xt_NFLOG.c
xt_NFQUEUE.c
xt_osf.c
xt_owner.c
xt_physdev.c
xt_pkttype.c
xt_policy.c
xt_quota.c
xt_rateest.c
xt_RATEEST.c
xt_realm.c
xt_recent.c
xt_REDIRECT.c
xt_repldata.h
xt_sctp.c	sctp: move SCTP_PAD4 and SCTP_TRUNC4 to linux/sctp.h	2022-11-17 21:43:34 -08:00
xt_SECMARK.c
xt_set.c
xt_socket.c
xt_state.c
xt_statistic.c
xt_string.c
xt_TCPMSS.c
xt_tcpmss.c
xt_TCPOPTSTRIP.c
xt_tcpudp.c
xt_TEE.c
xt_time.c
xt_TPROXY.c
xt_TRACE.c
xt_u32.c