summaryrefslogtreecommitdiffstats
path: root/src/evaluate.c
Commit message (Expand)AuthorAgeFilesLines
* src: allow variable in chain policyFernando Fernandez Mancera2019-08-081-0/+24
* src: allow variables in the chain priority specificationFernando Fernandez Mancera2019-08-081-14/+47
* src: add parse_ctx objectPablo Neira Ayuso2019-08-081-2/+4
* cache: add NFT_CACHE_UPDATE and NFT_CACHE_FLUSHED flagsPablo Neira Ayuso2019-07-231-5/+3
* evaluate: missing location for chain nested in table definitionPablo Neira Ayuso2019-07-221-0/+1
* src: evaluate: support prefix expression in statementsFlorian Westphal2019-07-221-0/+48
* evaluate: bogus error when refering to existing non-base chainPablo Neira Ayuso2019-07-181-6/+3
* src: introduce SYNPROXY matchingFernando Fernandez Mancera2019-07-171-0/+15
* evaluate: missing basic evaluation of expectationsPablo Neira Ayuso2019-07-161-4/+30
* src: add ct expectations supportStéphane Veyret2019-07-161-0/+4
* evaluate: honor NFT_SET_OBJECT flagPablo Neira Ayuso2019-07-161-3/+3
* src: use set_is_anonymous()Pablo Neira Ayuso2019-07-161-1/+1
* evaluate: missing object maps handling in list and flush commandsPablo Neira Ayuso2019-07-161-8/+5
* src: add set_is_datamap(), set_is_objmap() and set_is_map() helpersPablo Neira Ayuso2019-07-161-6/+6
* exthdr: add support for matching IPv4 optionsStephen Suryaputra2019-07-041-0/+17
* ct: support for NFT_CT_{SRC,DST}_{IP,IP6}Pablo Neira Ayuso2019-06-211-1/+24
* evaluate: do not allow to list/flush anonymous sets via list commandPablo Neira Ayuso2019-06-191-6/+28
* evaluate: allow get/list/flush dynamic sets and maps via list commandPablo Neira Ayuso2019-06-191-3/+3
* src: add cache level flagsPablo Neira Ayuso2019-06-171-1/+2
* src: remove useless parameter from cache_flush()Pablo Neira Ayuso2019-06-171-1/+1
* evaluate: double datatype_free() with dynamic integer datatypesPablo Neira Ayuso2019-06-141-2/+0
* evaluate: update byteorder only for implicit mapsPablo Neira Ayuso2019-06-141-1/+2
* evaluate: use-after-free in meterPablo Neira Ayuso2019-06-131-1/+2
* src: add reference counter for dynamic datatypesPablo Neira Ayuso2019-06-131-18/+19
* src: Support intra-transaction rule referencesPhil Sutter2019-06-071-20/+74
* evaluate: use-after-free in implicit setPablo Neira Ayuso2019-06-071-1/+2
* src: single cache_update() call to build cache before evaluationPablo Neira Ayuso2019-06-061-75/+1
* src: Allow goto and jump to a variableFernando Fernandez Mancera2019-05-241-0/+7
* src: Introduce chain_expr in jump and goto statementsFernando Fernandez Mancera2019-05-241-0/+4
* src: use definitions in include/linux/netfilter/nf_tables.hPablo Neira Ayuso2019-05-121-1/+1
* src: add nat support for the inet familyFlorian Westphal2019-04-091-40/+84
* evaluate: improve error reporting in tproxy with inet familyPablo Neira Ayuso2019-04-041-2/+5
* evaluate: skip binary transfer for named setsPablo Neira Ayuso2019-03-261-0/+3
* evaluate: misleading error reporting with sets and mapsPablo Neira Ayuso2019-03-061-4/+6
* src: expr: add expression etypeFlorian Westphal2019-02-081-36/+36
* src: expr: add and use expr_name helperFlorian Westphal2019-02-081-11/+11
* src: remove deprecated code for export/import commandsPablo Neira Ayuso2018-12-271-1/+1
* src: Reject 'export vm json' commandPhil Sutter2018-12-211-0/+3
* src: introduce simple hints on incorrect objectPablo Neira Ayuso2018-12-011-3/+20
* src: introduce simple hints on incorrect setPablo Neira Ayuso2018-11-191-27/+41
* src: introduce simple hints on incorrect chainPablo Neira Ayuso2018-11-191-9/+22
* src: introduce simple hints on incorrect tablePablo Neira Ayuso2018-11-191-57/+48
* evaluate: stmt_evaluate_map() needs right hand side evaluation tooPablo Neira Ayuso2018-10-251-0/+8
* evaluate: do not pass EXPR_SET_ELEM to stmt_evaluate_arg() for set/map evalua...Pablo Neira Ayuso2018-10-251-2/+2
* src: pass struct nft_ctx through struct netlink_ctxPablo Neira Ayuso2018-10-221-37/+18
* src: pass struct nft_ctx through struct eval_ctxPablo Neira Ayuso2018-10-221-67/+67
* evaluate: bogus bail out with raw expression from dynamic setsPablo Neira Ayuso2018-10-171-1/+11
* src: add support for setting secmarkChristian Göttsche2018-10-151-0/+5
* src: add ipsec (xfrm) expressionMáté Eckl2018-09-211-0/+19
* evaluate: throw distinct error if map exists but contains no objectsFlorian Westphal2018-09-201-2/+4