Jan Engelhardt
9b1c7c1c04
build: remove support for Linux 4.9
2018-02-12 14:59:44 +01:00
Jan Engelhardt
ed8e496750
build: remove support for Linux 4.8
2018-02-12 14:57:21 +01:00
Jan Engelhardt
5339fcc65b
build: remove support for Linux 4.7
2018-02-12 14:56:57 +01:00
Jan Engelhardt
2265c1b854
build: remove support for Linux 4.6
2018-02-12 14:56:40 +01:00
Jan Engelhardt
2c574f992d
build: remove support for Linux 4.5
2018-02-12 14:56:24 +01:00
Jan Engelhardt
3a24468a68
build: remove support for Linux 4.4
2018-02-12 14:56:05 +01:00
Jan Engelhardt
7682cc8c34
build: remove support for Linux 4.3
2018-02-12 14:55:45 +01:00
Jan Engelhardt
215b3c5b12
build: remove support for Linux 4.2
2018-02-12 14:54:26 +01:00
Jan Engelhardt
4dbb36b723
build: remove support for Linux 4.1
2018-02-12 14:53:25 +01:00
Jan Engelhardt
10f951e61d
build: remove support for Linux 4.0
2018-02-12 14:53:01 +01:00
Jan Engelhardt
a4c50ae405
build: remove support for Linux 3.19
2018-02-12 14:50:33 +01:00
Jan Engelhardt
38d89983ca
build: remove support for Linux 3.18
2018-02-12 14:49:20 +01:00
Jan Engelhardt
25985650a9
build: remove support for Linux 3.17
2018-02-12 14:48:53 +01:00
Jan Engelhardt
4de9ff1505
build: remove support for Linux 3.16
2018-02-12 14:48:34 +01:00
Jan Engelhardt
46b7cf206b
build: remove support for Linux 3.15
2018-02-12 14:47:58 +01:00
Jan Engelhardt
29d10e11fa
build: remove support for Linux 3.14
2018-02-12 14:46:50 +01:00
Jan Engelhardt
60a26f1dea
build: remove support for Linux 3.13
2018-02-12 14:45:55 +01:00
Jan Engelhardt
cdf90737be
build: remove support for Linux 3.12
2018-02-12 14:45:41 +01:00
Jan Engelhardt
5713415014
build: remove support for Linux 3.11
2018-02-12 14:45:30 +01:00
Jan Engelhardt
230bc1f327
build: remove support for Linux 3.10
2018-02-12 14:45:14 +01:00
Jan Engelhardt
d360f5578c
build: remove support for Linux 3.9
2018-02-12 14:45:00 +01:00
Jan Engelhardt
dd32060f6a
build: remove support for Linux 3.8
2018-02-12 14:40:30 +01:00
Jan Engelhardt
d5eb4e586c
build: remove support for Linux 3.7
2018-02-12 14:39:36 +01:00
Jan Engelhardt
1b4b4347c5
geoip: apply consistent style to xt_geoip_build
2018-02-12 13:58:18 +01:00
Philip Prindeville
2f37af43c5
geoip: selective endianness catalog generation
2018-02-12 13:56:48 +01:00
Jan Engelhardt
56e5970c64
xt_pknock: don't split function heads
2018-01-05 01:36:12 +01:00
Marcelo Henrique Cerri
2b76b68c65
build: support for Linux 4.15
...
Signed-off-by: Marcelo Henrique Cerri <marcelo.cerri@canonical.com >
2018-01-05 01:35:12 +01:00
Seth Forshee
d2eeac4c32
build: (additional) support for Linux 4.14
...
Signed-off-by: Seth Forshee <seth.forshee@canonical.com >
2018-01-05 01:35:07 +01:00
Jan Engelhardt
0e9037b000
Xtables-addons 2.14
v2.14
2017-11-22 18:29:25 +01:00
Jan Engelhardt
0a6091b64a
DNETMAP: remove NF_CT_ASSERT use
...
The hooks are already checked by the xtables core (due to struct
xt_target::hooks).
2017-11-22 18:27:36 +01:00
Jan Engelhardt
b565a85fb6
DNETMAP: fix write past end of buffer
2017-11-22 18:24:10 +01:00
Jan Engelhardt
89c80f5981
DELUDE: fix PVSStudio reports
...
V560 A part of conditional expression is always true: !oth->rst.
2017-07-23 19:59:36 +02:00
Jan Engelhardt
8579fd2b3b
ipp2p: fix PVSStudio reports
...
V666 Consider inspecting fourth argument of the function 'HX_memmem'.
It is possible that the value does not correspond with the length of
a string which was passed with the third argument.
2017-07-23 19:56:42 +02:00
Jan Engelhardt
0a836e9677
pknock: fix PVSStudio static analyzer reports
...
V595 The 'peer' pointer was utilized before it was verified against
nullptr.
2017-07-23 19:55:06 +02:00
Jan Engelhardt
90b0f3a51f
Xtables-addons 2.13
v2.13
2017-06-29 14:46:37 +02:00
Grzegorz Kuczyński
89d1b808b9
xt_condition: namespace support #2
2017-06-27 13:36:03 +02:00
Jan Engelhardt
c839e87bbb
xt_geoip: check for allocation overflow
2017-06-26 22:03:53 +02:00
Jan Engelhardt
a587f9526d
compat_xtables: use more accurate printf format for NIPQUAD
...
We never expect to emit values greater than 255 here, so use %hhu to
address more sprintf warnings.
2017-06-15 12:18:41 +02:00
Jan Engelhardt
1874fcd519
xt_DNETMAP: fix a buffer overflow
...
prefix_str was only 16 bytes, but the largest emitted string could be
"255.255.255.255/32" (19 bytes).
xt_DNETMAP.c: In function "dnetmap_tg_check":
compat_xtables.h:46:22: warning: "%u" directive writing between 1 and 10
bytes into a region of size between 0 and 8 [-Wformat-overflow=]
# define NIPQUAD_FMT "%u.%u.%u.%u"
xt_DNETMAP.c:296:2: note: "sprintf" output between 10 and 27 bytes into
a destination of size 16
sprintf(p->prefix_str, NIPQUAD_FMT "/%u", NIPQUAD(mr->min_addr.ip),
33 - ffs(~(ip_min ^ ip_max)));
2017-06-15 12:15:48 +02:00
Jan Engelhardt
21ea7b76ec
xt_LOGMARK: resolve new gcc7 warnings
...
xt_LOGMARK.c:56:32: warning: increment of a boolean expression [-Wbool-operation]
printk("%s""SEEN_REPLY", prev++ ? "," : "");
xt_LOGMARK.c:58:29: warning: increment of a boolean expression [-Wbool-operation]
printk("%s""ASSURED", prev++ ? "," : "");
xt_LOGMARK.c:60:31: warning: increment of a boolean expression [-Wbool-operation]
printk("%s""CONFIRMED", prev++ ? "," : "");
2017-06-15 12:00:09 +02:00
Ralph Sennhauser
ee8da2b1ac
build: support for Linux 4.12
...
As a result of commit cc41c84b7e7f ("netfilter: kill the fake untracked
conntrack objects") the helper nf_ct_is_untracked always returns false
and commit ab8bc7ed864b ("netfilter: remove nf_ct_is_untracked") removes
it all together.
Signed-off-by: Ralph Sennhauser <ralph.sennhauser@gmail.com >
2017-06-15 11:57:23 +02:00
Grzegorz Kuczyński
19a4359368
xt_condition: add support for namespaces
2017-06-15 10:45:37 +02:00
Jan Engelhardt
1b379667d3
xt_psd: resolve compiler warning
...
xt_psd.c:53:0: warning: "HASH_SIZE" redefined
#define HASH_SIZE (1 << HASH_LOG)
linux-4.10.10/include/linux/hashtable.h:26:0:
note: this is the location of the previous definition
#define HASH_SIZE(name) (ARRAY_SIZE(name))
2017-04-13 11:38:00 +02:00
Jan Engelhardt
cd410aefe7
Xtables-addons 2.12
v2.12
2017-01-11 01:39:53 +01:00
Jan Engelhardt
e4b5cef8f0
build: mark Linux 4.10 as supported
2017-01-04 02:44:43 +01:00
Ralph Sennhauser
a8af97b8fa
build: support for Linux 4.10
...
Commit 613dbd95723aee7abd16860745691b6c7bda20dc (netfilter:
x_tables: move hook state into xt_action_param structure) changes the
struct xt_action_param, accommodate for it.
Signed-off-by: Ralph Sennhauser <ralph.sennhauser@gmail.com >
2017-01-04 02:40:41 +01:00
Ralph Sennhauser
db234c30cd
build: support for Linux 4.9
...
Commit f330a7fdbe1611104622faff7e614a246a7d20f0 (netfilter: conntrack:
get rid of conntrack timer) replaces timer_list with an u32, use helper
from commit c8607e020014cf11a61601a0005270bad81cabdf (netfilter: nft_ct:
fix expiration getter).
Signed-off-by: Ralph Sennhauser <ralph.sennhauser@gmail.com >
2017-01-04 02:04:14 +01:00
Jan Engelhardt
2e6fb73e85
Xtables-addons 2.11
v2.11
2016-05-20 14:35:46 +02:00
Jan Engelhardt
6024758b28
xt_ECHO: ensure IP header length is set
2016-05-20 10:48:27 +02:00
Jan Engelhardt
69f3f21a32
xt_ECHO: handle fragments
...
Since everything is just echoed back verbatim without modification,
supporting fragments seems easy.
2016-05-20 10:48:00 +02:00