summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
...
* evaluate: bail out if anonymous concat set defines a non concat expressionPablo Neira Ayuso2024-01-124-2/+46
* evaluate: do not fetch next expression on runaway number of concatenation com...Pablo Neira Ayuso2024-01-121-2/+2
* evaluate: skip anonymous set optimization for concatenationsPablo Neira Ayuso2024-01-121-9/+11
* evaluate: add missing range checks for dup,fwd and payload statementsFlorian Westphal2024-01-113-41/+69
* evaluate: tproxy: move range error checks after arg evaluationFlorian Westphal2024-01-112-6/+14
* evaluate: error out when expression has no datatypeFlorian Westphal2024-01-111-0/+5
* doc: clarify reject is supported at prerouting stageQuan Tian2024-01-101-1/+1
* doc: incorrect datatype description for icmpv6_type and icmpvx_codePablo Neira Ayuso2024-01-101-2/+2
* tests: shell: extend coverage for netdevice removalPablo Neira Ayuso2024-01-104-0/+59
* tests: add a test case for double-flush bug in pipapoFlorian Westphal2024-01-082-0/+34
* datatype: do not assert when value exceeds expected widthFlorian Westphal2024-01-081-2/+4
* tests: shell: prefer project nft to system-wide nftFlorian Westphal2024-01-072-20/+20
* datatype: Describe rt symbol tablesPhil Sutter2024-01-025-0/+58
* datatype: Initialize rt_symbol_tables' base fieldPhil Sutter2024-01-021-4/+8
* datatype: rt_symbol_table_init() to search for iproute2 configsPhil Sutter2024-01-023-6/+36
* parser_bison: ensure all timeout policy names are releasedFlorian Westphal2023-12-222-5/+34
* src: do not allow to chain more than 16 binopsFlorian Westphal2023-12-225-5/+53
* netlink: fix stack overflow due to erroneous roundingFlorian Westphal2023-12-202-3/+14
* evaluate: don't crash if object map does not refer to a valueFlorian Westphal2023-12-202-0/+11
* parser_bison: error out on duplicated type/typeof/element keywordsFlorian Westphal2023-12-191-2/+36
* tests: shell: add test to cover payload transport match and manglePablo Neira Ayuso2023-12-192-0/+180
* intervals: BUG on prefix expressions without valueFlorian Westphal2023-12-191-0/+3
* tcpopt: don't create exthdr expression without datatypeFlorian Westphal2023-12-192-1/+2
* intervals: set_to_range can be staticFlorian Westphal2023-12-162-2/+3
* evaluate: fix stack overflow with huge priority stringFlorian Westphal2023-12-152-1/+6
* netlink: fix stack buffer overflow with sub-reg sized prefixesFlorian Westphal2023-12-152-2/+10
* src: reject large raw payload and concat expressionsFlorian Westphal2023-12-155-0/+28
* evaluate: exthdr: statement arg must be not be a rangeFlorian Westphal2023-12-142-3/+17
* netlink: don't crash if prefix for < byte is requestedFlorian Westphal2023-12-147-1/+63
* Revert "evaluate: error out when existing set has incompatible key"Florian Westphal2023-12-145-15/+30
* evaluate: fix gmp assertion with too-large reject codeFlorian Westphal2023-12-142-0/+8
* meta: fix tc classid parsing out-of-bounds accessFlorian Westphal2023-12-132-20/+15
* evaluate: error out when existing set has incompatible keyFlorian Westphal2023-12-132-0/+15
* evaluate: stmt_nat: set reference must point to a mapFlorian Westphal2023-12-132-0/+19
* parser_bison: fix memory leaks on hookspec error processingFlorian Westphal2023-12-132-0/+28
* parser_bison: close chain scope before chain releaseFlorian Westphal2023-12-132-0/+6
* parser_bison: fix ct scope underflow if ct helper section is duplicatedFlorian Westphal2023-12-122-4/+25
* parser_bison: make sure obj_free releases timeout policiesFlorian Westphal2023-12-122-0/+6
* netlink_linearize: avoid strict-overflow warning in netlink_gen_bitwise()Thomas Haller2023-12-121-4/+3
* evaluate: fix bogus assertion failure with boolean datatypeFlorian Westphal2023-12-123-3/+30
* netlink: add and use nft_data_memcpy helperFlorian Westphal2023-12-122-11/+16
* parser_bison: fix memleak in meta set error handlingFlorian Westphal2023-12-112-0/+6
* parser_bison: fix objref statement corruptionFlorian Westphal2023-12-113-37/+71
* evaluate: validate chain max lengthFlorian Westphal2023-12-113-1/+45
* tests: py: missing json output in meta.t with vlan mappingPablo Neira Ayuso2023-12-111-0/+60
* evaluate: reset statement length context before evaluating statementPablo Neira Ayuso2023-12-087-34/+88
* tests: py: missing json output in never merge across non-expression statementsPablo Neira Ayuso2023-12-071-0/+31
* tests: rename file to lowercaseFlorian Westphal2023-12-061-0/+0
* parser: tcpopt: fix tcp option parsing with NUM + length fieldFlorian Westphal2023-12-064-10/+93
* tests: shell: add test case for sets without keyFlorian Westphal2023-12-061-0/+12