summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* doc: Basic documentation of anonymous chainsHEADmasterPhil Sutter20 hours2-4/+18
* tests: shell: Add a test case for FTP helper combined with NAT.Yi Chen2 days4-0/+190
* tests: helpers: suppress mount error messagesFlorian Westphal6 days1-1/+1
* json: work around fuzzer-induced assert crashesFlorian Westphal7 days2-131/+146
* json: prevent null deref if chain->policy is not setFlorian Westphal8 days3-6/+26
* tests: py: fix json single-flag output for fib & synproxyFlorian Westphal8 days2-0/+49
* tests: shell: check for features not available in 5.4Pablo Neira Ayuso2025-05-294-1/+5
* cache: Tolerate object deserialization failuresPhil Sutter2025-05-251-6/+5
* netlink: Keep going after set element parsing failuresPhil Sutter2025-05-251-1/+3
* netlink: Pass netlink_ctx to netlink_delinearize_setelem()Phil Sutter2025-05-253-12/+12
* netlink_delinearize: Replace some BUG()s by error messagesPhil Sutter2025-05-251-6/+11
* tests: shell: check if kernel supports for cgroupsv2 matchingPablo Neira Ayuso2025-05-202-0/+8
* tests: shell: skip egress in netdev chain release path testPablo Neira Ayuso2025-05-201-7/+11
* netlink: Catch unknown types when deserializing objectsPhil Sutter2025-05-201-0/+4
* netlink: Avoid potential NULL-ptr deref parsing set elem expressionsPhil Sutter2025-05-201-1/+2
* tests: shell: Include kernel taint value in warningPhil Sutter2025-05-161-1/+1
* tests: shell: Add test case for JSON 'flags' arraysPhil Sutter2025-05-131-0/+189
* json: Introduce json_add_array_new()Phil Sutter2025-05-131-75/+24
* json: Print single synproxy flags as non-arrayPhil Sutter2025-05-131-2/+6
* json: Print single fib flag as non-arrayPhil Sutter2025-05-131-1/+9
* json: Print single set flag as non-arrayPhil Sutter2025-05-1373-289/+97
* doc: Fix typo in nat statement 'prefix' descriptionPhil Sutter2025-05-131-1/+1
* parser_json: Introduce parse_flags_array()Phil Sutter2025-05-132-335/+136
* src: netlink: fix crash when ops doesn't support udataFlorian Westphal2025-05-111-1/+1
* tests/shell: Skip netdev_chain_dev_addremove on tainted kernelsPhil Sutter2025-05-081-10/+11
* src: remove bogus empty fileFlorian Westphal2025-04-251-0/+0
* tests: shell: Update packetpath/flowtablesYi Chen2025-04-221-27/+50
* build: Bump version to 1.1.3v1.1.3Pablo Neira Ayuso2025-04-221-2/+2
* netlink: bogus concatenated set ranges with netlink message overrunPablo Neira Ayuso2025-04-213-5/+755
* evalute: make vlan pcp updates workFlorian Westphal2025-04-222-4/+40
* Revert "intervals: do not merge intervals with different timeout"Pablo Neira Ayuso2025-04-171-5/+1
* build: Bump version to 1.1.2v1.1.2Pablo Neira Ayuso2025-04-141-3/+3
* parser_bison: add selector_expr rule to restrict typeof_exprPablo Neira Ayuso2025-04-112-17/+36
* optimize: invalidate merge in case of duplicated key in set/mapPablo Neira Ayuso2025-04-092-1/+79
* evaluate: bail out if ct saddr/daddr dependency cannot be insertedFlorian Westphal2025-04-071-1/+2
* parser_json: only allow concatenations with 2 or more expressionsFlorian Westphal2025-04-023-9/+41
* evaluate: fix crash when generating reject statement errorFlorian Westphal2025-04-022-2/+46
* evaluate: reject: remove unused expr function argumentFlorian Westphal2025-04-021-16/+10
* optimize: expand expression list when merging into concatenationPablo Neira Ayuso2025-04-014-0/+74
* cache: prevent possible crash rule filter is NULLPablo Neira Ayuso2025-04-011-2/+4
* parser_json: bail out on malformed statement in setPablo Neira Ayuso2025-04-011-12/+27
* parser_json: allow statement stateful statement only in set elementsPablo Neira Ayuso2025-04-011-0/+5
* parser_json: reject empty jump/goto chainPablo Neira Ayuso2025-04-011-3/+7
* cache: don't crash when filter is NULLFlorian Westphal2025-04-012-2/+5
* expression: incorrect assert() list_expr_to_binopPablo Neira Ayuso2025-04-011-1/+1
* evaluate: only allow stateful statements in set and map definitionsFlorian Westphal2025-03-312-1/+38
* evaluate: compact STMT_F_STATEFUL checksFlorian Westphal2025-03-311-12/+14
* expression: don't try to import empty stringFlorian Westphal2025-03-312-1/+39
* expression: initialize list of expression to silence gcc compile warningPablo Neira Ayuso2025-03-311-1/+6
* json: fix error propagation when parsing binop lhs/rhsFlorian Westphal2025-03-312-0/+90