summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* Amend "tests: shell: Fix ifname_based_hooks feature check"1.0.6.yPablo Neira Ayuso2 days2-4/+6
* Revert "tests: shell: move flowtable with bogus priority to correct location"Pablo Neira Ayuso2 days2-11/+0
* Partial revert "tests: py: move meter tests to tests/shell"Pablo Neira Ayuso2 days2-96/+24
* Revert "evaluate: translate meter into dynamic set"Pablo Neira Ayuso2 days6-71/+24
* Partial revert in testcase/sets/set_stmt to remove last statement coveragePablo Neira Ayuso2 days2-30/+8
* Revert mptcp tests for sets/typeof_sets_0Pablo Neira Ayuso2 days2-56/+0
* Revert "evaluate: allow to re-use existing metered set"Pablo Neira Ayuso2 days3-136/+0
* Revert "src: print set element with multi-word description in single one line"Pablo Neira Ayuso2 days22-1016/+523
* Revert "json: Print single set flag as non-array"Pablo Neira Ayuso2 days72-96/+288
* Backport nftables tests/shell from 2a38f458f12bPablo Neira Ayuso2 days921-550/+59576
* evalute: make vlan pcp updates workFlorian Westphal2 days1-4/+38
* evaluate: only allow stateful statements in set and map definitionsFlorian Westphal2 days1-1/+4
* evaluate: compact STMT_F_STATEFUL checksFlorian Westphal2 days1-12/+14
* parser_json: only allow concatenations with 2 or more expressionsFlorian Westphal2 days1-8/+12
* evaluate: fix crash when generating reject statement errorFlorian Westphal2 days1-2/+14
* json: disallow empty concatenationPablo Neira Ayuso2 days1-0/+7
* expression: don't try to import empty stringFlorian Westphal2 days1-1/+1
* json: fix error propagation when parsing binop lhs/rhsFlorian Westphal2 days1-0/+14
* json: work around fuzzer-induced assert crashesFlorian Westphal2 days1-126/+135
* meta: fix tc classid parsing out-of-bounds accessFlorian Westphal3 days2-20/+15
* evaluate: don't update cache for anonymous chainsFlorian Westphal3 days2-0/+12
* evaluate: reject sets with no keyFlorian Westphal3 days3-0/+13
* evaluate: fix assertion failure with malformed map definitionsFlorian Westphal4 days2-1/+10
* rule: return error if table does not existFlorian Westphal4 days2-1/+10
* parser_bison: add selector_expr rule to restrict typeof_exprPablo Neira Ayuso4 days2-17/+36
* parser_bison: reject non-serializeable typeof expressionsFlorian Westphal4 days2-4/+17
* evaluate: move interval flag compat check after set key evaluationFlorian Westphal4 days2-3/+16
* evaluate: don't allow merging interval set/map with non-interval oneFlorian Westphal4 days2-7/+23
* src: do not allow to chain more than 16 binopsFlorian Westphal4 days5-5/+53
* parser_bison: ensure all timeout policy names are releasedFlorian Westphal4 days2-5/+34
* json: make sure timeout list is initialisedFlorian Westphal4 days3-7/+84
* netlink: fix stack buffer overrun when emitting ranged expressionsFlorian Westphal4 days3-16/+57
* evaluate: don't allow nat map with specified protocolFlorian Westphal4 days2-0/+9
* tests: shell: move flowtable with bogus priority to correct locationFlorian Westphal4 days1-1/+0
* netlink: Avoid crash upon missing NFTNL_OBJ_CT_TIMEOUT_ARRAY attributePhil Sutter2025-06-191-3/+4
* netlink: Fix for potential crash parsing a flowtablePhil Sutter2025-06-191-1/+1
* netlink: Do not allocate a bogus flowtable priority exprPhil Sutter2025-06-191-2/+4
* json: prevent null deref if chain->policy is not setFlorian Westphal2025-06-193-6/+26
* optimize: invalidate merge in case of duplicated key in set/mapPablo Neira Ayuso2025-06-192-1/+79
* optimize: expand expression list when merging into concatenationPablo Neira Ayuso2025-06-194-0/+448
* optimize: compact bitmask matching in set/mapPablo Neira Ayuso2025-06-193-1/+74
* optimize: incorrect comparison for reject statementPablo Neira Ayuso2025-06-191-1/+1
* expression: tolerate named set protocol dependencyFlorian Westphal2025-06-194-0/+102
* netlink: bogus concatenated set ranges with netlink message overrunPablo Neira Ayuso2025-06-193-5/+755
* segtree: incomplete output in get element command with mapsPablo Neira Ayuso2025-06-191-19/+20
* segtree: fix string data initialisationFlorian Westphal2025-06-192-1/+63
* evaluate: release existing datatype when evaluating unary expressionPablo Neira Ayuso2025-06-191-1/+1
* payload: return early if dependency is not a payload expressionFlorian Westphal2025-06-171-1/+2
* evaluate: optimize zero length rangePablo Neira Ayuso2025-06-171-3/+9
* fib: Change data type of fib oifname to "ifname"Xiao Liang2025-06-174-3/+5