summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Expand)AuthorAgeFilesLines
* evaluate: reject set definition with no keyPablo Neira Ayuso2023-12-121-2/+6
* monitor: add support for concatenated set rangesPablo Neira Ayuso2023-12-121-2/+9
* evaluate: fix double free on dtype releaseFlorian Westphal2023-12-121-1/+1
* evaluate: catch implicit map expressions without known datatypeFlorian Westphal2023-12-121-0/+4
* evaluate: reject attempt to update a setFlorian Westphal2023-12-121-0/+4
* evaluate: error out if basetypes are differentFlorian Westphal2023-12-051-2/+5
* evaluate: guard against NULL basetypeFlorian Westphal2023-12-051-1/+1
* evaluate: handle invalid mapping expressions gracefullyPablo Neira Ayuso2023-12-051-2/+2
* json: deal appropriately with multidevice in chainPablo Neira Ayuso2023-11-272-58/+58
* evaluate: clone unary expression datatype to deal with dynamic datatypePablo Neira Ayuso2023-11-271-1/+1
* evaluate: fix rule replacement with anon setsFlorian Westphal2023-11-211-0/+1
* json: fix use after free in table_flags_json()Thomas Haller2023-11-211-1/+1
* src: expand create commandsPablo Neira Ayuso2023-11-211-1/+2
* netlink: fix buffer size for user data in netlink_delinearize_chain()Thomas Haller2023-11-211-1/+1
* meta: fix hour decoding when timezone offset is negativeFlorian Westphal2023-11-211-4/+9
* tproxy: Drop artificial port printing restrictionPhil Sutter2023-11-211-1/+1
* parser_bison: fix length check for ifname in ifname_expr_alloc()Thomas Haller2023-11-211-1/+2
* parser_bison: Fix for broken compatibility with older dumpsPhil Sutter2023-11-031-0/+6
* evaluate: validate maximum log statement prefix lengthPablo Neira Ayuso2023-11-031-1/+6
* rule: never merge across non-expression statementsFlorian Westphal2023-11-031-4/+2
* netlink_linearize: skip set element expression in map statement keyPablo Neira Ayuso2023-11-034-3/+81
* json: expose dynamic flagPablo Neira Ayuso2023-11-032-0/+3
* parser_json: Default meter size to zeroPhil Sutter2023-11-031-1/+1
* netlink: handle invalid etype in set_make_key()Thomas Haller2023-11-031-0/+2
* datatype: initialize TYPE_CT_EVENTBIT slot in datatype arrayPablo Neira Ayuso2023-11-032-1/+2
* datatype: initialize TYPE_CT_LABEL slot in datatype arrayPablo Neira Ayuso2023-11-032-1/+2
* parser_json: Catch nonsense ops in match statementPhil Sutter2023-11-031-4/+9
* parser_json: Wrong check in json_parse_ct_timeout_policy()Phil Sutter2023-11-031-1/+1
* parser_json: Fix synproxy object mss/wscale parsingPhil Sutter2023-11-031-3/+4
* parser_json: Fix limit object burst value parsingPhil Sutter2023-11-031-1/+1
* parser_json: Fix flowtable prio value parsingPhil Sutter2023-11-031-1/+1
* parser_json: Proper ct expectation attribute parsingPhil Sutter2023-11-031-6/+7
* parser_json: Fix typo in json_parse_cmd_add_object()Phil Sutter2023-11-031-1/+1
* parser_json: Catch wrong "reset" payloadPhil Sutter2023-11-031-1/+8
* limit: display default burst when listing rulesetPablo Neira Ayuso2023-11-031-3/+1
* evaluate: expand sets and maps before evaluationPablo Neira Ayuso2023-11-033-40/+32
* scanner: restrict include directive to regular filesFlorian Westphal2023-11-031-3/+66
* libnftables: refuse to open onput files other than named pipes or regular filesFlorian Westphal2023-11-031-0/+34
* datatype: fix leak and cleanup reference counting for struct datatypeThomas Haller2023-11-036-50/+77
* evaluate: fix get element for concatenated setFlorian Westphal2023-11-031-4/+7
* evaluate: revisit anonymous set with single element optimizationPablo Neira Ayuso2023-11-031-20/+40
* evaluate: fix check for truncation in stmt_evaluate_log_prefix()Thomas Haller2023-11-031-1/+1
* evaluate: do not remove anonymous set with protocol flags and single elementPablo Neira Ayuso2023-11-021-1/+6
* evaluate: Drop dead code from expr_evaluate_mapping()Phil Sutter2023-11-021-11/+8
* parser: permit gc-interval in map declarationsFlorian Westphal2023-11-021-0/+5
* parser: allow ct timeouts to use time_spec valuesFlorian Westphal2023-11-022-6/+13
* libnftables: Drop cache in -c/--check modePablo Neira Ayuso2023-11-021-2/+5
* netlink: delinearize: copy set keytype if neededFlorian Westphal2023-11-021-0/+2
* expression: define .clone for catchall set elementPablo Neira Ayuso2023-11-021-2/+13
* parser: reject zero-length interface names in flowtablesFlorian Westphal2023-11-021-8/+12