summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* build: Bump version to 1.1.3v1.1.3Pablo Neira Ayuso2025-04-221-2/+2
* netlink: bogus concatenated set ranges with netlink message overrunPablo Neira Ayuso2025-04-213-5/+755
* evalute: make vlan pcp updates workFlorian Westphal2025-04-222-4/+40
* Revert "intervals: do not merge intervals with different timeout"Pablo Neira Ayuso2025-04-171-5/+1
* build: Bump version to 1.1.2v1.1.2Pablo Neira Ayuso2025-04-141-3/+3
* parser_bison: add selector_expr rule to restrict typeof_exprPablo Neira Ayuso2025-04-112-17/+36
* optimize: invalidate merge in case of duplicated key in set/mapPablo Neira Ayuso2025-04-092-1/+79
* evaluate: bail out if ct saddr/daddr dependency cannot be insertedFlorian Westphal2025-04-071-1/+2
* parser_json: only allow concatenations with 2 or more expressionsFlorian Westphal2025-04-023-9/+41
* evaluate: fix crash when generating reject statement errorFlorian Westphal2025-04-022-2/+46
* evaluate: reject: remove unused expr function argumentFlorian Westphal2025-04-021-16/+10
* optimize: expand expression list when merging into concatenationPablo Neira Ayuso2025-04-014-0/+74
* cache: prevent possible crash rule filter is NULLPablo Neira Ayuso2025-04-011-2/+4
* parser_json: bail out on malformed statement in setPablo Neira Ayuso2025-04-011-12/+27
* parser_json: allow statement stateful statement only in set elementsPablo Neira Ayuso2025-04-011-0/+5
* parser_json: reject empty jump/goto chainPablo Neira Ayuso2025-04-011-3/+7
* cache: don't crash when filter is NULLFlorian Westphal2025-04-012-2/+5
* expression: incorrect assert() list_expr_to_binopPablo Neira Ayuso2025-04-011-1/+1
* evaluate: only allow stateful statements in set and map definitionsFlorian Westphal2025-03-312-1/+38
* evaluate: compact STMT_F_STATEFUL checksFlorian Westphal2025-03-311-12/+14
* expression: don't try to import empty stringFlorian Westphal2025-03-312-1/+39
* expression: initialize list of expression to silence gcc compile warningPablo Neira Ayuso2025-03-311-1/+6
* json: fix error propagation when parsing binop lhs/rhsFlorian Westphal2025-03-312-0/+90
* tests: shell: Fix owner/0002-persist on aarch64Phil Sutter2025-03-281-1/+2
* tests: shell: Add socat availability feature testPhil Sutter2025-03-287-15/+12
* json: don't BUG when asked to list synproxiesFlorian Westphal2025-03-273-6/+38
* json: disallow empty concatenationPablo Neira Ayuso2025-03-272-0/+34
* src: remove flagcmp expressionPablo Neira Ayuso2025-03-275-105/+0
* src: transform flag match expression to binop expression from parserPablo Neira Ayuso2025-03-273-4/+42
* optimize: compact bitmask matching in set/mapPablo Neira Ayuso2025-03-273-1/+74
* optimize: incorrect comparison for reject statementPablo Neira Ayuso2025-03-271-1/+1
* expression: add __EXPR_MAX and use it to define EXPR_MAXPablo Neira Ayuso2025-03-272-2/+3
* json: return error if table does not existFlorian Westphal2025-03-272-1/+9
* tests: shell: missing ct count elements in new set_stmt testPablo Neira Ayuso2025-03-251-0/+4
* evaluate: don't update cache for anonymous chainsFlorian Westphal2025-03-222-0/+12
* json: make sure timeout list is initialisedFlorian Westphal2025-03-213-7/+84
* tests: shell: extend coverage for set element statementsPablo Neira Ayuso2025-03-212-0/+110
* parser_bison: consolidate connlimit grammar rule for set elementsPablo Neira Ayuso2025-03-211-20/+21
* parser_bison: consolidate last grammar rule for set elementsPablo Neira Ayuso2025-03-211-21/+18
* parser_bison: consolidate quota grammar rule for set elementsPablo Neira Ayuso2025-03-211-26/+23
* parser_bison: consolidate limit grammar rule for set elementsPablo Neira Ayuso2025-03-211-40/+37
* parser_bison: consolidate counter grammar rule for set elementsPablo Neira Ayuso2025-03-211-10/+1
* evaluate: fix assertion failure with malformed map definitionsFlorian Westphal2025-03-202-1/+10
* rule: return error if table does not existFlorian Westphal2025-03-202-1/+10
* evaluate: don't allow nat map with specified protocolFlorian Westphal2025-03-202-0/+9
* expression: tolerate named set protocol dependencyFlorian Westphal2025-03-204-0/+102
* netlink_delinerize: add more restrictions on meta nfproto removalFlorian Westphal2025-03-205-18/+138
* parser_bison: reject non-serializeable typeof expressionsFlorian Westphal2025-03-202-4/+17
* tests: py: remove unknown fieldsPablo Neira Ayuso2025-03-193-3/+3
* netlink: fix stack buffer overrun when emitting ranged expressionsFlorian Westphal2025-03-183-16/+57