Pablo Neira Ayuso 938154b93b netfilter: nf_tables: reject unbound anonymous set before commit phase ...

Add a new list to track set transaction and to check for unbound
anonymous sets before entering the commit phase.

Bail out at the end of the transaction handling if an anonymous set
remains unbound.

Fixes: 96518518cc ("netfilter: add nftables")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

2023-06-20 22:43:41 +02:00

..

ipv4

…

ipv6

…

br_netfilter.h

…

nf_bpf_link.h

bpf: minimal support for programs hooked into netfilter framework

2023-04-21 11:34:14 -07:00

nf_conntrack_acct.h

netfilter: conntrack: remove extension register api

2022-02-04 06:30:28 +01:00

nf_conntrack_act_ct.h

net/sched: act_ct: Fill offloading tuple iifidx

2022-01-04 12:12:55 +00:00

nf_conntrack_bpf.h

net: netfilter: move bpf_ct_set_nat_info kfunc in nf_nat_bpf.c

2022-10-03 09:17:32 -07:00

nf_conntrack_bridge.h

…

nf_conntrack_core.h

netfilter: conntrack: fix wrong ct->timeout value

2023-04-19 12:08:38 +02:00

nf_conntrack_count.h

netfilter: nf_conncount: reduce unnecessary GC

2022-05-16 13:05:40 +02:00

nf_conntrack_ecache.h

netfilter: prefer extension check to pointer check

2022-05-13 18:56:28 +02:00

nf_conntrack_expect.h

…

nf_conntrack_extend.h

netfilter: extensions: introduce extension genid count

2022-05-13 18:52:16 +02:00

nf_conntrack_helper.h

net: move add ct helper function to nf_conntrack_helper for ovs and tc

2022-11-08 12:15:19 +01:00

nf_conntrack_l4proto.h

…

nf_conntrack_labels.h

netfilter: extensions: introduce extension genid count

2022-05-13 18:52:16 +02:00

nf_conntrack_seqadj.h

netfilter: conntrack: remove extension register api

2022-02-04 06:30:28 +01:00

nf_conntrack_synproxy.h

…

nf_conntrack_timeout.h

netfilter: nf_conntrack: add missing __rcu annotations

2022-07-11 16:25:15 +02:00

nf_conntrack_timestamp.h

netfilter: conntrack: remove extension register api

2022-02-04 06:30:28 +01:00

nf_conntrack_tuple.h

…

nf_conntrack_zones.h

…

nf_conntrack.h

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next

2023-02-20 10:53:56 +00:00

nf_dup_netdev.h

…

nf_flow_table.h

net/sched: act_ct: Fix promotion of offloaded unreplied tuple

2023-06-14 09:56:50 +02:00

nf_hooks_lwtunnel.h

…

nf_log.h

…

nf_nat_helper.h

netfilter: nat: move repetitive nat port reserve loop to a helper

2022-09-07 16:46:04 +02:00

nf_nat_masquerade.h

…

nf_nat_redirect.h

netfilter: nft_redir: use struct nf_nat_range2 throughout and deduplicate eval call-backs

2023-03-22 21:48:59 +01:00

nf_nat.h

net: move the nat function to nf_nat_ovs for ovs and tc

2022-12-12 10:14:03 +00:00

nf_queue.h

treewide: use get_random_u32() when possible

2022-10-11 17:42:58 -06:00

nf_reject.h

netfilter: conntrack: skip verification of zero UDP checksum

2022-05-13 18:56:28 +02:00

nf_socket.h

…

nf_synproxy.h

…

nf_tables_core.h

netfilter: nf_tables: avoid retpoline overhead for some ct expression calls

2023-01-18 13:05:25 +01:00

nf_tables_ipv4.h

netfilter: use skb_ip_totlen and iph_totlen

2023-02-01 20:54:27 -08:00

nf_tables_ipv6.h

netfilter: nf_tables: reduce nft_pktinfo by 8 bytes

2022-10-25 13:44:14 +02:00

nf_tables_offload.h

netfilter: nf_tables: bail out early if hardware offload is not supported

2022-06-06 19:19:15 +02:00

nf_tables.h

netfilter: nf_tables: reject unbound anonymous set before commit phase

2023-06-20 22:43:41 +02:00

nf_tproxy.h

netfilter: tproxy: fix deadlock due to missing BH disable

2023-03-06 12:09:48 +01:00

nft_fib.h

netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters

2022-11-15 10:46:34 +01:00

nft_meta.h

netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters

2022-11-15 10:46:34 +01:00

nft_reject.h

netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters

2022-11-15 10:46:34 +01:00

xt_rateest.h

net: sched: Merge Qdisc::bstats and Qdisc::cpu_bstats data types

2021-10-18 12:54:41 +01:00