summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Expand)AuthorAgeFilesLines
* ct: support for NFT_CT_{SRC,DST}_{IP,IP6}Pablo Neira Ayuso2019-06-216-29/+58
* src: prefer meta protocol as bridge l3 dependencyFlorian Westphal2019-06-192-1/+23
* src: statement: disable reject statement type omission for bridgeFlorian Westphal2019-06-193-4/+14
* netlink_delinerize: remove network header dep for reject statement also in br...Florian Westphal2019-06-191-0/+4
* rule: do not suggest anonymous sets on mispelling errorsPablo Neira Ayuso2019-06-191-0/+2
* evaluate: do not allow to list/flush anonymous sets via list commandPablo Neira Ayuso2019-06-191-6/+28
* evaluate: allow get/list/flush dynamic sets and maps via list commandPablo Neira Ayuso2019-06-191-3/+3
* src: add cache level flagsPablo Neira Ayuso2019-06-174-104/+97
* netlink: remove netlink_list_table()Pablo Neira Ayuso2019-06-172-7/+2
* rule: skip cache population from do_command_monitor()Pablo Neira Ayuso2019-06-171-32/+0
* src: remove useless parameter from cache_flush()Pablo Neira Ayuso2019-06-172-2/+2
* datatype: fix print of raw numerical symbol valuesFlorian Westphal2019-06-171-11/+2
* cache: do not populate the cache in case of flush ruleset commandPablo Neira Ayuso2019-06-142-0/+6
* evaluate: double datatype_free() with dynamic integer datatypesPablo Neira Ayuso2019-06-142-7/+0
* evaluate: update byteorder only for implicit mapsPablo Neira Ayuso2019-06-141-1/+2
* evaluate: use-after-free in meterPablo Neira Ayuso2019-06-131-1/+2
* monitor: Accept -j flagPhil Sutter2019-06-131-0/+3
* netlink_delinearize: use-after-free in expr_postprocess_string()Pablo Neira Ayuso2019-06-131-1/+1
* datatype: dtype_clone() should clone flags tooPablo Neira Ayuso2019-06-131-1/+1
* src: add reference counter for dynamic datatypesPablo Neira Ayuso2019-06-1312-62/+90
* parser_bison: free chain name after creating constant expressionPablo Neira Ayuso2019-06-101-0/+1
* netlink_delinearize: release expression before calling netlink_parse_concat_e...Pablo Neira Ayuso2019-06-101-0/+4
* netlink_delinearize: release expressions in context registersPablo Neira Ayuso2019-06-101-3/+3
* expression: use expr_clone() from verdict_expr_clone()Pablo Neira Ayuso2019-06-101-1/+1
* src: invalid read when importing chain name (trace and json)Pablo Neira Ayuso2019-06-102-3/+2
* src: invalid read when importing chain namePablo Neira Ayuso2019-06-102-4/+4
* src: Support intra-transaction rule referencesPhil Sutter2019-06-072-20/+78
* src: Make cache_is_complete() publicPhil Sutter2019-06-071-1/+1
* rule: Introduce rule_lookup_by_index()Phil Sutter2019-06-071-0/+11
* cache: Fix evaluation for rules with index referencePhil Sutter2019-06-071-7/+1
* libnftables: check for errors after evaluationsPablo Neira Ayuso2019-06-071-0/+3
* mnl: bogus error when running monitor modePablo Neira Ayuso2019-06-071-3/+1
* libnftables: keep evaluating until parser_max_errorsPablo Neira Ayuso2019-06-071-1/+2
* evaluate: use-after-free in implicit setPablo Neira Ayuso2019-06-071-1/+2
* rule: ensure cache consistencyPablo Neira Ayuso2019-06-071-1/+8
* src: generation ID is 32-bit longPablo Neira Ayuso2019-06-072-6/+10
* libnftables: Drop cache in error casePhil Sutter2019-06-061-0/+4
* src: Fix cache_flush() in cache_needs_more() logicPhil Sutter2019-06-061-0/+3
* src: single cache_update() call to build cache before evaluationPablo Neira Ayuso2019-06-066-102/+143
* src: Display parser and evaluate errors in one shotPablo Neira Ayuso2019-06-052-15/+16
* src: perform evaluation after parsingPablo Neira Ayuso2019-06-052-30/+27
* src: dynamic input_descriptor allocationPablo Neira Ayuso2019-06-053-55/+44
* mnl: Simplify mnl_batch_talk()Phil Sutter2019-05-311-16/+13
* mnl: Initialize fd_set before select(), not afterPhil Sutter2019-05-311-3/+3
* erec: remove double \n on error when internal_netlink is usedPablo Neira Ayuso2019-05-311-1/+0
* mnl: mnl_batch_talk() returns -1 on internal netlink errorsPablo Neira Ayuso2019-05-312-5/+10
* mnl: estimate receiver buffer sizePablo Neira Ayuso2019-05-312-4/+10
* mnl: add mnl_nft_batch_to_msg()Pablo Neira Ayuso2019-05-311-18/+36
* mnl: call mnl_set_sndbuffer() from mnl_batch_talk()Pablo Neira Ayuso2019-05-311-1/+2
* mnl: mnl_set_rcvbuffer() skips buffer size update if it is too smallPablo Neira Ayuso2019-05-311-0/+11