summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* src: prefer meta protocol as bridge l3 dependencyHEADmasterFlorian Westphal13 hours9-121/+151
* src: statement: disable reject statement type omission for bridgeFlorian Westphal13 hours4-5/+16
* netlink_delinerize: remove network header dep for reject statement also in br...Florian Westphal13 hours4-200/+49
* rule: do not suggest anonymous sets on mispelling errorsPablo Neira Ayuso16 hours1-0/+2
* evaluate: do not allow to list/flush anonymous sets via list commandPablo Neira Ayuso16 hours2-6/+61
* evaluate: allow get/list/flush dynamic sets and maps via list commandPablo Neira Ayuso16 hours2-3/+27
* tests: add missing json arp operation outputFlorian Westphal39 hours1-0/+21
* src: add cache level flagsPablo Neira Ayuso3 days8-107/+135
* netlink: remove netlink_list_table()Pablo Neira Ayuso3 days3-8/+3
* rule: skip cache population from do_command_monitor()Pablo Neira Ayuso3 days1-32/+0
* tests: shell: cannot use handle for non-existing rule in kernelPablo Neira Ayuso3 days1-1/+1
* src: remove useless parameter from cache_flush()Pablo Neira Ayuso3 days3-4/+3
* datatype: fix print of raw numerical symbol valuesFlorian Westphal3 days4-11/+17
* cache: do not populate the cache in case of flush ruleset commandPablo Neira Ayuso6 days3-0/+7
* evaluate: double datatype_free() with dynamic integer datatypesPablo Neira Ayuso6 days3-8/+0
* evaluate: update byteorder only for implicit mapsPablo Neira Ayuso6 days1-1/+2
* evaluate: use-after-free in meterPablo Neira Ayuso7 days1-1/+2
* monitor: Accept -j flagPhil Sutter7 days2-7/+5
* netlink_delinearize: use-after-free in expr_postprocess_string()Pablo Neira Ayuso7 days1-1/+1
* datatype: dtype_clone() should clone flags tooPablo Neira Ayuso7 days1-1/+1
* src: add reference counter for dynamic datatypesPablo Neira Ayuso7 days14-65/+96
* parser_bison: free chain name after creating constant expressionPablo Neira Ayuso10 days1-0/+1
* netlink_delinearize: release expression before calling netlink_parse_concat_e...Pablo Neira Ayuso10 days1-0/+4
* netlink_delinearize: release expressions in context registersPablo Neira Ayuso10 days2-4/+6
* expression: use expr_clone() from verdict_expr_clone()Pablo Neira Ayuso10 days1-1/+1
* src: invalid read when importing chain name (trace and json)Pablo Neira Ayuso10 days2-3/+2
* src: invalid read when importing chain namePablo Neira Ayuso10 days2-4/+4
* tests/shell: Print unified diffs in dump errorsPhil Sutter12 days1-1/+1
* tests/shell: Fix warning from awk callPhil Sutter12 days1-1/+1
* tests/py: Add missing arp.t JSON equivalentsPhil Sutter12 days2-8/+70
* tests/py: Fix JSON equivalentsPhil Sutter12 days3-80/+86
* src: Support intra-transaction rule referencesPhil Sutter12 days8-20/+139
* src: Make cache_is_complete() publicPhil Sutter12 days2-1/+2
* rule: Introduce rule_lookup_by_index()Phil Sutter12 days2-0/+13
* tests/json_echo: Drop needless workaroundPhil Sutter12 days1-4/+2
* cache: Fix evaluation for rules with index referencePhil Sutter12 days1-7/+1
* libnftables: check for errors after evaluationsPablo Neira Ayuso13 days1-0/+3
* mnl: bogus error when running monitor modePablo Neira Ayuso13 days1-3/+1
* libnftables: keep evaluating until parser_max_errorsPablo Neira Ayuso13 days1-1/+2
* evaluate: use-after-free in implicit setPablo Neira Ayuso13 days1-1/+2
* rule: ensure cache consistencyPablo Neira Ayuso13 days1-1/+8
* src: generation ID is 32-bit longPablo Neira Ayuso13 days4-8/+12
* libnftables: Drop cache in error casePhil Sutter2019-06-061-0/+4
* src: Fix cache_flush() in cache_needs_more() logicPhil Sutter2019-06-061-0/+3
* src: single cache_update() call to build cache before evaluationPablo Neira Ayuso2019-06-067-102/+144
* src: Display parser and evaluate errors in one shotPablo Neira Ayuso2019-06-052-15/+16
* src: perform evaluation after parsingPablo Neira Ayuso2019-06-053-31/+27
* src: dynamic input_descriptor allocationPablo Neira Ayuso2019-06-055-56/+47
* tests/py: Support JSON validationPhil Sutter2019-05-311-1/+24
* py: Implement JSON validation in nftables modulePhil Sutter2019-05-314-1/+47