Gao Feng 779994fa36 netfilter: log: Check param to avoid overflow in nf_log_set ...

The nf_log_set is an interface function, so it should do the strict sanity
check of parameters. Convert the return value of nf_log_set as int instead
of void. When the pf is invalid, return -EOPNOTSUPP.

Signed-off-by: Gao Feng <fgao@ikuai8.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

2016-08-30 11:52:32 +02:00

..

ipv4

ipv4: Push struct net down into nf_send_reset

2015-09-29 20:21:31 +02:00

ipv6

netfilter: ipv6: avoid nf_iterate recursion

2015-11-23 17:54:45 +01:00

br_netfilter.h

bridge: Pass net into br_validate_ipv4 and br_validate_ipv6

2015-09-29 20:21:32 +02:00

nf_conntrack_acct.h

…

nf_conntrack_core.h

netfilter: conntrack: simplify the code by using nf_conntrack_get_ht

2016-08-18 01:20:52 +02:00

nf_conntrack_ecache.h

netfilter: don't rely on DYING bit to detect when destroy event was sent

2016-08-30 11:43:08 +02:00

nf_conntrack_expect.h

netfilter: conntrack: use a single expectation table for all namespaces

2016-05-06 11:50:01 +02:00

nf_conntrack_extend.h

netfilter: move nat hlist_head to nf_conn

2016-07-11 11:47:50 +02:00

nf_conntrack_helper.h

netfilter: Add helper array register/unregister functions

2016-07-21 02:31:53 +02:00

nf_conntrack_l3proto.h

…

nf_conntrack_l4proto.h

netfilter: remove ip_conntrack* sysctl compat code

2016-08-13 13:27:13 +02:00

nf_conntrack_labels.h

netfilter: connlabels: move set helper to xt_connlabel

2016-07-22 17:05:10 +02:00

nf_conntrack_seqadj.h

…

nf_conntrack_synproxy.h

…

nf_conntrack_timeout.h

netfilter: cttimeout: add netns support

2015-12-14 12:48:58 +01:00

nf_conntrack_timestamp.h

…

nf_conntrack_tuple.h

…

nf_conntrack_zones.h

netfilter: move zone info into struct nf_conn

2016-06-23 13:33:12 +02:00

nf_conntrack.h

netfilter: remove __nf_ct_kill_acct helper

2016-08-30 11:43:10 +02:00

nf_dup_netdev.h

netfilter: nf_tables: add packet duplication to the netdev family

2016-01-03 21:04:23 +01:00

nf_log.h

netfilter: log: Check param to avoid overflow in nf_log_set

2016-08-30 11:52:32 +02:00

nf_nat_core.h

netfilter: Pass net into nf_xfrm_me_harder

2015-09-18 22:00:22 +02:00

nf_nat_helper.h

…

nf_nat_l3proto.h

…

nf_nat_l4proto.h

…

nf_nat_redirect.h

…

nf_nat.h

netfilter: nat: convert nat bysrc hash to rhashtable

2016-07-11 12:07:57 +02:00

nf_queue.h

netfilter: nf_queue: Make the queue_handler pernet

2016-05-25 11:54:22 +02:00

nf_tables_bridge.h

…

nf_tables_core.h

netfilter: nf_tables: wrap tracing with a static key

2015-12-09 13:23:13 +01:00

nf_tables_ipv4.h

…

nf_tables_ipv6.h

…

nf_tables.h

netfilter: nf_tables: honor NLM_F_EXCL flag in set element insertion

2016-08-26 17:30:20 +02:00

nfnetlink_log.h

…

nft_dup.h

…

nft_masq.h

netfilter: nft_masq: support port range

2016-03-02 20:05:27 +01:00

nft_meta.h

netfilter: nf_tables: wrap tracing with a static key

2015-12-09 13:23:13 +01:00

nft_redir.h

…

nft_reject.h

…

xt_rateest.h

…