Toggle navigation
Patchwork
Netfilter Development
Patches
Bundles
About this project
Login
Register
Mail settings
Show patches with
: Submitter =
Florian Westphal
| 3442 patches
Series
Submitter
State
any
Action Required
New
Under Review
Accepted
Rejected
RFC
Not Applicable
Changes Requested
Awaiting Upstream
Superseded
Deferred
Needs Review / ACK
Handled Elsewhere
Search
Archived
No
Yes
Both
Delegate
------
Nobody
jgarzik
arnd
ymano
smfrench
jlayton
tseliot
ogasawara
amitk
awhitcroft
mst
dayangkun
jwboyer
jwboyer
colinking
colinking
azummo
dwmw2
rtg
sconklin
smb
aliguori
bradf
demarchi
ms
bhundven
chbs
kengyu
kadlec
regit
jabk
laforge
laforge
tonyb
alai
zecke
zecke
__damien__
luka
luka
prafulla@marvell.com
cyrus
PeterHuewe
kiho
jow
jow
ypwong
nico
dedeckeh
dedeckeh
yousong
yousong
tomcwarren
mb
patrick_delaunay
mrchuck
vineetg76
computersforpeace
Noltari
Noltari
ee07b291
ldir
ldir
stefanct
zhouhan
carldani
blp
ffainelli
ffainelli
regXboi
bbrezillon
pravin
mkp
jpettit
mkresin
mkresin
thess
thess
fbarrat
fbarrat
phil
linville
jesse
tjaalton
esben
abrodkin
abrodkin
diproiettod
tbot
stephenfin
ajd
darball1
sammj
jogo
jogo
bhelgaas
blogic
blogic
oohal
russellb
ptomsich
agraf
joestringer
mwalle
naveen
pepe2k
pepe2k
pchotard
arj
arj
davem
davem
davem
tagr
tagr
tagr
jforissier
andmur01
amitay
matttbe
pabeni
istokes
aparcar
tytso
danielschwierzeck
martineau
maddy
Ansuel
goliath
mariosix
dcaratti
aserdean
ovsrobot
ovsrobot
XiaoYang
marex
tpetazzoni
mkorpershoek
khem
liwang
robimarko
apritzel
danielhb
groug
npiggin
mmichelson
pareddja
atishp
netdrv
mkubecek
stintel
stintel
jkicinski
cpitchen
dsa
jstancek
bpf
shettyg
lorpie01
acelan
wigyori
wigyori
pm215
apopple
dja
alexhung
lynxis
lynxis
brgl
brgl
peda
akodanev
0andriy
981213
narmstrong
snowpatch_ozlabs
snowpatch_ozlabs
snowpatch_ozlabs
aivanov
atishp04
shemminger
monstr
blocktrron
vigneshr
mraynal
chunkeey
stewart
stewart
metan
kabel
Jaehoon
rfried
ukleinek
ukleinek
freenix
prom
rsalvaterra
adrianschmutzler
ivanhu
hegdevasant
hegdevasant
ehristev
arbab
jacmet
jagan
ag
bmeng
wsa
rmilecki
rmilecki
sjg
xypron
horms
akumar
kevery
wbx
chleroy
abelloni
legoater
legoater
legoater
svanheule
rw
rw
apconole
trini
juju
pablo
pablo
bjonglez
sbabic
sbabic
ynezz
xback
xback
richiejp
dangole
dangole
pevik
jonhunter
aik
forty
echaudron
acer
amusil
Hauke
Hauke
anuppatel
anuppatel
next_ghost
benh
rgrimm
segher
passgat
pratyush
jms
jms
jms
numans
mans0n
ruscur
jk
jk
jk
jk
jmberg
festevam
Andes
ymorin
xuyang
linusw
linusw
tambarus
matthias_bgg
conchuod
kubu
ltpci
stroese
spectrum
pbrobinson
strlen
strlen
imaximets
apalos
dceara
krzk
cazzacarna
neocturne
aldot
TIENFONG
mpe
sfr
galak
ktraynor
arnout
robh
nbd
nbd
kcxt
anguy11
paulus
jm
hs
Apply
«
1
2
3
4
…
34
35
»
Patch
Series
A/F/R/T
S/W/F
Date
Submitter
Delegate
State
[nft,v3] src: add conntrack information to trace monitor mode
[nft,v3] src: add conntrack information to trace monitor mode
- - 1 -
-
-
-
2025-07-07
Florian Westphal
New
[nf] netfilter: nf_tables: hide clash bit from userspace
[nf] netfilter: nf_tables: hide clash bit from userspace
- 1 - -
-
-
-
2025-07-07
Florian Westphal
New
[nf-next,2/2] netfilter: nf_tables: all transaction allocations can now sleep
netfilter: nf_tables: make set flush more resistant to memory pressure
- - - -
-
-
-
2025-07-04
Florian Westphal
New
[nf-next,1/2] netfilter: nf_tables: allow iter callbacks to sleep
netfilter: nf_tables: make set flush more resistant to memory pressure
- - - -
-
-
-
2025-07-04
Florian Westphal
New
[nf-next,5/5] netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps
netfilter: nft_set updates
- - - -
-
-
-
2025-07-01
Florian Westphal
New
[nf-next,4/5] netfilter: nft_set_pipapo: merge pipapo_get/lookup
netfilter: nft_set updates
- - - -
-
-
-
2025-07-01
Florian Westphal
New
[nf-next,3/5] netfilter: nft_set: remove indirection from update API call
netfilter: nft_set updates
- - - -
-
-
-
2025-07-01
Florian Westphal
New
[nf-next,2/5] netfilter: nft_set: remove one argument from lookup and update functions
netfilter: nft_set updates
- - - -
-
-
-
2025-07-01
Florian Westphal
New
[nf-next,1/5] netfilter: nft_set_pipapo: remove unused arguments
netfilter: nft_set updates
- - - -
-
-
-
2025-07-01
Florian Westphal
New
[nf] selftests: netfilter: nft_concat_range.sh: send packets to empty set
[nf] selftests: netfilter: nft_concat_range.sh: send packets to empty set
- - - -
-
-
-
2025-07-01
Florian Westphal
New
[nf,4/4] netfilter: nf_conntrack: fix crash due to removal of uninitialised entry
netfilter: conntrack: fix obscure confirmed race
- 1 - -
-
-
-
2025-06-27
Florian Westphal
New
[nf,3/4] selftests: netfilter: conntrack_resize.sh: also use udpclash tool
netfilter: conntrack: fix obscure confirmed race
- - - -
-
-
-
2025-06-27
Florian Westphal
New
[nf,2/4] selftests: netfilter: add conntrack clash resolution test case
netfilter: conntrack: fix obscure confirmed race
- - - -
-
-
-
2025-06-27
Florian Westphal
New
[nf,1/4] selftests: netfilter: conntrack_resize.sh: extend resize test
netfilter: conntrack: fix obscure confirmed race
- - - -
-
-
-
2025-06-27
Florian Westphal
New
[nft] evaluate: check element key vs. set definition
[nft] evaluate: check element key vs. set definition
- - - -
-
-
-
2025-06-26
Florian Westphal
New
[nft] src: add conntrack information to trace monitor mode
[nft] src: add conntrack information to trace monitor mode
- - - -
-
-
-
2025-05-08
Florian Westphal
New
[nf-next] netfilter: nft_byteorder: remove multi-register support
[nf-next] netfilter: nft_byteorder: remove multi-register support
- 1 - -
-
-
-
2024-02-14
Florian Westphal
New
[v3,nft] support for afl++ (american fuzzy lop++) fuzzer
[v3,nft] support for afl++ (american fuzzy lop++) fuzzer
- - - -
-
-
-
2023-12-19
Florian Westphal
New
[nft,1/2] src: split monitor trace code into new trace.c
src: add conntrack information to trace monitor mode
- - 1 -
-
-
-
2025-07-07
Florian Westphal
Accepted
[nft] evaluate: prevent merge of sets with incompatible keys
[nft] evaluate: prevent merge of sets with incompatible keys
- - 1 -
-
-
-
2025-06-26
Florian Westphal
Accepted
[nft] json: reject too long interface names
[nft] json: reject too long interface names
- 1 1 -
-
-
-
2025-06-24
Florian Westphal
Accepted
[nft] evaluate: avoid double-free on error handling of bogus objref maps
[nft] evaluate: avoid double-free on error handling of bogus objref maps
- - 1 -
-
-
-
2025-06-24
Florian Westphal
Accepted
[nft] evaluate: make sure chain jump name comes with a null byte
[nft] evaluate: make sure chain jump name comes with a null byte
- - 1 -
-
-
-
2025-06-24
Florian Westphal
Accepted
[nft,v2] evaluate: check that set type is identical before merging
[nft,v2] evaluate: check that set type is identical before merging
- - - -
-
-
-
2025-06-23
Florian Westphal
Accepted
[nft] evalute: don't BUG on unexpected base datatype
[nft] evalute: don't BUG on unexpected base datatype
- - - -
-
-
-
2025-06-13
Florian Westphal
Accepted
[v2,nft] src: move BASECHAIN flag toggle to netlink linearize code for device update
[v2,nft] src: move BASECHAIN flag toggle to netlink linearize code for device update
- 1 - -
-
-
-
2025-06-12
Florian Westphal
Accepted
[nft,v2,2/2] evaluate: restrict allowed subtypes of concatenations
[nft,v2,1/2] evaluate: rename recursion counter to recursion.binop
- - - -
-
-
-
2025-06-06
Florian Westphal
Accepted
[nft,v2,1/2] evaluate: rename recursion counter to recursion.binop
[nft,v2,1/2] evaluate: rename recursion counter to recursion.binop
- - - -
-
-
-
2025-06-06
Florian Westphal
Accepted
[nft] mnl: catch bogus expressions before crashing
[nft] mnl: catch bogus expressions before crashing
- - 1 -
-
-
-
2025-06-05
Florian Westphal
Accepted
[nft] json: prevent null deref if chain->policy is not set
[nft] json: prevent null deref if chain->policy is not set
1 2 - -
-
-
-
2025-06-02
Florian Westphal
Accepted
[nft] json: work around fuzzer-induced assert crashes
[nft] json: work around fuzzer-induced assert crashes
1 - - -
-
-
-
2025-06-02
Florian Westphal
Accepted
[nft] tests: py: fix json single-flag output for fib & synproxy
[nft] tests: py: fix json single-flag output for fib & synproxy
1 2 - -
-
-
-
2025-06-02
Florian Westphal
Accepted
[nf,2/2] selftests: netfilter: nft_nat.sh: add test for reverse clash with nat
[nf,1/2] netfilter: nf_nat: also check reverse tuple to obtain clashing entry
- - - 1
-
-
-
2025-05-30
Florian Westphal
Accepted
[nf,1/2] netfilter: nf_nat: also check reverse tuple to obtain clashing entry
[nf,1/2] netfilter: nf_nat: also check reverse tuple to obtain clashing entry
- 1 - 1
-
-
-
2025-05-30
Florian Westphal
Accepted
[nf-next,3/3] selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug
netfilter: nf_set_pipapo_avx2: fix initial map fill
- - - -
-
-
-
2025-05-23
Florian Westphal
Accepted
[nf-next,2/3] selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing
netfilter: nf_set_pipapo_avx2: fix initial map fill
- - - -
-
-
-
2025-05-23
Florian Westphal
Accepted
[nf-next,1/3] netfilter: nf_set_pipapo_avx2: fix initial map fill
netfilter: nf_set_pipapo_avx2: fix initial map fill
- 1 - -
-
-
-
2025-05-23
Florian Westphal
Accepted
[libnftnl,v2] trace: add support for TRACE_CT information
[libnftnl,v2] trace: add support for TRACE_CT information
- - 1 -
-
-
-
2025-05-22
Florian Westphal
Accepted
[nf-next,v2,2/2] netfilter: nf_tables: add packets conntrack state to debug trace info
netfilter: nf_tables: include conntrack state in trace messages
- - - -
-
-
-
2025-05-22
Florian Westphal
Accepted
[nf-next,v2,1/2] netfilter: conntrack: make nf_conntrack_id callable without a module dependency
netfilter: nf_tables: include conntrack state in trace messages
- - - -
-
-
-
2025-05-22
Florian Westphal
Accepted
[nf-next,v2,5/5] selftests: netfilter: nft_fib.sh: add type and oif tests with and without VRFs
netfilter: resolve fib+vrf issues
- - - -
-
-
-
2025-05-21
Florian Westphal
Accepted
[nf-next,v2,4/5] netfilter: nf_tables: nft_fib: consistent l3mdev handling
netfilter: resolve fib+vrf issues
- 1 - -
-
-
-
2025-05-21
Florian Westphal
Accepted
[nf-next,v2,3/5] netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy
netfilter: resolve fib+vrf issues
- 1 - -
-
-
-
2025-05-21
Florian Westphal
Accepted
[nf-next,v2,2/5] selftests: netfilter: move fib vrf test to nft_fib.sh
netfilter: resolve fib+vrf issues
- - - -
-
-
-
2025-05-21
Florian Westphal
Accepted
[nf-next,v2,1/5] selftests: netfilter: nft_fib.sh: add 'type' mode tests
netfilter: resolve fib+vrf issues
- - - -
-
-
-
2025-05-21
Florian Westphal
Accepted
[nf-next] netfilter: xtables: support arpt_mark and ipv6 optstrip for iptables-nft only builds
[nf-next] netfilter: xtables: support arpt_mark and ipv6 optstrip for iptables-nft only builds
- 1 - -
-
-
-
2025-05-16
Florian Westphal
Accepted
[nft] src: netlink: fix crash when ops doesn't support udata
[nft] src: netlink: fix crash when ops doesn't support udata
- 1 1 -
-
-
-
2025-05-08
Florian Westphal
Accepted
[net-next] selftests: netfilter: fix conntrack stress test failures on debug kernels
[net-next] selftests: netfilter: fix conntrack stress test failures on debug kernels
- 1 - -
-
-
-
2025-05-07
Florian Westphal
Accepted
[nf-next] selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation
[nf-next] selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation
- - 1 -
-
-
-
2025-05-06
Florian Westphal
Accepted
[nf-next] tools: selftests: prepare for non-default IP_TABLES_LEGACY
[nf-next] tools: selftests: prepare for non-default IP_TABLES_LEGACY
- - - -
-
-
-
2025-04-24
Florian Westphal
Accepted
[nf-next] netfilter: nf_tables: fix debug splat when dumping pipapo avx2 set
[nf-next] netfilter: nf_tables: fix debug splat when dumping pipapo avx2 set
- 1 - -
-
-
-
2025-04-23
Florian Westphal
Accepted
[nf-next] selftests: netfilter: nft_fib.sh: check lo packets bypass fib lookup
[nf-next] selftests: netfilter: nft_fib.sh: check lo packets bypass fib lookup
- - - -
-
-
-
2025-04-23
Florian Westphal
Accepted
[v2,nf-next] netfilter: nf_conntrack: speed up reads from nf_conntrack proc file
[v2,nf-next] netfilter: nf_conntrack: speed up reads from nf_conntrack proc file
- - - -
-
-
-
2025-04-22
Florian Westphal
Accepted
[nft] evalute: make vlan pcp updates work
[nft] evalute: make vlan pcp updates work
- - 1 -
-
-
-
2025-04-19
Florian Westphal
Accepted
[nf-next] selftests: netfilter: add conntrack stress test
[nf-next] selftests: netfilter: add conntrack stress test
- - - -
-
-
-
2025-04-17
Florian Westphal
Accepted
[nf] netfilter: conntrack: fix erronous removal of offload bit
[nf] netfilter: conntrack: fix erronous removal of offload bit
- 1 - -
-
-
-
2025-04-15
Florian Westphal
Accepted
[v2,nftables,4/4] tests: shell: add feature check for count output change
src: print count variable in normal set listings
- - - -
-
-
-
2025-04-08
Florian Westphal
Accepted
[v2,nftables,3/4] src: print count variable in normal set listings
src: print count variable in normal set listings
- - - -
-
-
-
2025-04-08
Florian Westphal
Accepted
[v2,nftables,2/4] debug: include kernel set information on cache fill
src: print count variable in normal set listings
- - - -
-
-
-
2025-04-08
Florian Westphal
Accepted
[v2,nftables,1/4] tests/py: prepare for set debug change
src: print count variable in normal set listings
- - - -
-
-
-
2025-04-08
Florian Westphal
Accepted
[v2,libnftnl] set: dump set backend name (hash, rbtree...) and elem count, if available
[v2,libnftnl] set: dump set backend name (hash, rbtree...) and elem count, if available
- - - -
-
-
-
2025-04-08
Florian Westphal
Accepted
[v2,nf-next] netfilter: nf_tables: export set count and backend name to userspace
[v2,nf-next] netfilter: nf_tables: export set count and backend name to userspace
- - - -
-
-
-
2025-04-08
Florian Westphal
Accepted
[v3,nf,2/3] selftests: netfilter: add test case for recent mismatch bug
nft_set_pipapo: fix incorrect avx2 match of 5th field octet
- - 1 -
-
-
-
2025-04-07
Florian Westphal
Accepted
[v3,nf,1/3] nft_set_pipapo: fix incorrect avx2 match of 5th field octet
nft_set_pipapo: fix incorrect avx2 match of 5th field octet
- 1 1 -
-
-
-
2025-04-07
Florian Westphal
Accepted
[nft] evaluate: bail out if ct saddr/daddr dependency cannot be inserted
[nft] evaluate: bail out if ct saddr/daddr dependency cannot be inserted
- 1 1 -
-
-
-
2025-04-02
Florian Westphal
Accepted
[nft] parser_json: only allow concatenations with 2 or more expressions
[nft] parser_json: only allow concatenations with 2 or more expressions
- - 1 -
-
-
-
2025-04-02
Florian Westphal
Accepted
[nft] cache: don't crash when filter is NULL
[nft] cache: don't crash when filter is NULL
- 1 1 -
-
-
-
2025-04-01
Florian Westphal
Accepted
[nft,2/2] evaluate: only allow stateful statements in set and map definitions
[nft,1/2] evaluate: compact STMT_F_STATEFUL checks
- 1 - -
-
-
-
2025-03-31
Florian Westphal
Accepted
[nft,1/2] evaluate: compact STMT_F_STATEFUL checks
[nft,1/2] evaluate: compact STMT_F_STATEFUL checks
- - 1 -
-
-
-
2025-03-31
Florian Westphal
Accepted
[nft,2/2] evaluate: fix crash when generating reject statement error
[nft,1/2] evaluate: reject: remove unused expr function argument
- - 1 -
-
-
-
2025-03-31
Florian Westphal
Accepted
[nft,1/2] evaluate: reject: remove unused expr function argument
[nft,1/2] evaluate: reject: remove unused expr function argument
- - 1 -
-
-
-
2025-03-31
Florian Westphal
Accepted
[nft] json: fix error protagation when parsing binop lhs/rhs
[nft] json: fix error protagation when parsing binop lhs/rhs
- 1 1 -
-
-
-
2025-03-28
Florian Westphal
Accepted
[nft,v2] json: don't BUG when asked to list synproxies
[nft,v2] json: don't BUG when asked to list synproxies
- - 1 -
-
-
-
2025-03-27
Florian Westphal
Accepted
[nft] expression: don't try to import empty string
[nft] expression: don't try to import empty string
- - 1 -
-
-
-
2025-03-27
Florian Westphal
Accepted
[nft,v2] evaluate: don't update cache for anonymous chains
[nft,v2] evaluate: don't update cache for anonymous chains
- 1 - -
-
-
-
2025-03-21
Florian Westphal
Accepted
[nft] json: make sure timeout list is initialised
[nft] json: make sure timeout list is initialised
- 1 1 -
-
-
-
2025-03-21
Florian Westphal
Accepted
[nft] evaluate: fix assertion failure with malformed map definitions
[nft] evaluate: fix assertion failure with malformed map definitions
- 1 1 -
-
-
-
2025-03-20
Florian Westphal
Accepted
[nft] rule: return error if table does not exist
[nft] rule: return error if table does not exist
- - 1 -
-
-
-
2025-03-20
Florian Westphal
Accepted
[nft] evaluate: don't allow nat map with specified protocol
[nft] evaluate: don't allow nat map with specified protocol
- 1 1 -
-
-
-
2025-03-20
Florian Westphal
Accepted
[nft,v2] expression: tolerate named set protocol dependency
[nft,v2] expression: tolerate named set protocol dependency
- - 1 -
-
-
-
2025-03-20
Florian Westphal
Accepted
[nft] parser_bison: reject non-serializeable typeof expressions
[nft] parser_bison: reject non-serializeable typeof expressions
- 2 - -
-
-
-
2025-03-19
Florian Westphal
Accepted
[nft] netlink_delinerize: add more restrictions on meta nfproto removal
[nft] netlink_delinerize: add more restrictions on meta nfproto removal
- - 1 -
-
-
-
2025-03-19
Florian Westphal
Accepted
[nft] evaluate: move interval flag compat check after set key evaluation
[nft] evaluate: move interval flag compat check after set key evaluation
- 1 1 -
-
-
-
2025-03-17
Florian Westphal
Accepted
[nft] netlink: fix stack buffer overrun when emitting ranged expressions
[nft] netlink: fix stack buffer overrun when emitting ranged expressions
- - - -
-
-
-
2025-03-14
Florian Westphal
Accepted
[nft] evaluate: don't allow merging interval set/map with non-interval one
[nft] evaluate: don't allow merging interval set/map with non-interval one
- - 1 -
-
-
-
2025-03-13
Florian Westphal
Accepted
[nft] evaluate: fix expression data corruption
[nft] evaluate: fix expression data corruption
- - 1 -
-
-
-
2025-03-11
Florian Westphal
Accepted
[nf] selftests: netfilter: skip br_netfilter queue tests if kernel is tainted
[nf] selftests: netfilter: skip br_netfilter queue tests if kernel is tainted
- - - -
-
-
-
2025-03-11
Florian Westphal
Accepted
[nft] tests: shell: skip interval size tests on kernel that lack rbtree size fix
[nft] tests: shell: skip interval size tests on kernel that lack rbtree size fix
1 - - -
-
-
-
2025-03-10
Florian Westphal
Accepted
[nft] evaluate: don't crash if range has same start and end interval
[nft] evaluate: don't crash if range has same start and end interval
- 1 1 -
-
-
-
2025-03-10
Florian Westphal
Accepted
[libnetfilter_log] autoconf: don't curl build script
[libnetfilter_log] autoconf: don't curl build script
- - - -
-
-
-
2025-03-09
Florian Westphal
Accepted
[nft] doc: add mptcp to tcp option matching list
[nft] doc: add mptcp to tcp option matching list
- - - -
-
-
-
2025-03-06
Florian Westphal
Accepted
[nf,v2] netfilter: nf_tables: make destruction work queue pernet
[nf,v2] netfilter: nf_tables: make destruction work queue pernet
- 1 - -
-
-
-
2025-03-06
Florian Westphal
Accepted
[nft] segtree: fix string data initialisation
[nft] segtree: fix string data initialisation
- 1 1 -
-
-
-
2025-03-05
Florian Westphal
Accepted
[nft] tests: remove temporary file
[nft] tests: remove temporary file
1 - - -
-
-
-
2025-03-04
Florian Westphal
Accepted
[nft] tests: add atomic chain replace test
[nft] tests: add atomic chain replace test
1 - - -
-
-
-
2025-03-03
Florian Westphal
Accepted
[nft,4/4] expression: expr_build_udata_recurse should recurse
add mptcp suboption mnemonics
- - - -
-
-
-
2025-02-27
Florian Westphal
Accepted
[nft,3/4] netlink_delinearize: also consider exthdr type when trimming binops
add mptcp suboption mnemonics
- - - -
-
-
-
2025-02-27
Florian Westphal
Accepted
[nft,2/4] expression: propagate key datatype for anonymous sets
add mptcp suboption mnemonics
- - - -
-
-
-
2025-02-27
Florian Westphal
Accepted
[nft,1/4] tcpopt: add symbol table for mptcp suboptions
add mptcp suboption mnemonics
- - - -
-
-
-
2025-02-27
Florian Westphal
Accepted
[nft] payload: don't kill dependency for proto_th
[nft] payload: don't kill dependency for proto_th
- - 1 -
-
-
-
2025-02-27
Florian Westphal
Accepted
«
1
2
3
4
…
34
35
»