summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
...
* tests: shell: cover netns removal for netdev and inet/ingress basechainsPablo Neira Ayuso2024-02-074-0/+78
* tests: shell: netdevice removal for inet familyPablo Neira Ayuso2024-02-072-6/+20
* json: Support sets' auto-merge optionPhil Sutter2024-01-313-2/+9
* tests: shell: add test to cover ct offload by using nft flowtablesYi Chen2024-01-231-0/+96
* tests: py: remove huge-limit test casesFlorian Westphal2024-01-194-100/+0
* rule: fix sym refcount assertionFlorian Westphal2024-01-152-1/+8
* evaluate: error out when store needs more than one 128bit register of align f...Florian Westphal2024-01-152-0/+6
* parser: reject raw payload expressions with 0 lengthFlorian Westphal2024-01-123-5/+32
* payload: only assert if l2 header base has no lengthFlorian Westphal2024-01-122-2/+2
* evaluate: release mpz type in expr_evaluate_list() error pathPablo Neira Ayuso2024-01-121-3/+9
* evaluate: release key expression in error path of implicit map with unknown d...Pablo Neira Ayuso2024-01-121-1/+3
* evaluate: bail out if anonymous concat set defines a non concat expressionPablo Neira Ayuso2024-01-124-2/+46
* evaluate: do not fetch next expression on runaway number of concatenation com...Pablo Neira Ayuso2024-01-121-2/+2
* evaluate: skip anonymous set optimization for concatenationsPablo Neira Ayuso2024-01-121-9/+11
* evaluate: add missing range checks for dup,fwd and payload statementsFlorian Westphal2024-01-113-41/+69
* evaluate: tproxy: move range error checks after arg evaluationFlorian Westphal2024-01-112-6/+14
* evaluate: error out when expression has no datatypeFlorian Westphal2024-01-111-0/+5
* doc: clarify reject is supported at prerouting stageQuan Tian2024-01-101-1/+1
* doc: incorrect datatype description for icmpv6_type and icmpvx_codePablo Neira Ayuso2024-01-101-2/+2
* tests: shell: extend coverage for netdevice removalPablo Neira Ayuso2024-01-104-0/+59
* tests: add a test case for double-flush bug in pipapoFlorian Westphal2024-01-082-0/+34
* datatype: do not assert when value exceeds expected widthFlorian Westphal2024-01-081-2/+4
* tests: shell: prefer project nft to system-wide nftFlorian Westphal2024-01-072-20/+20
* datatype: Describe rt symbol tablesPhil Sutter2024-01-025-0/+58
* datatype: Initialize rt_symbol_tables' base fieldPhil Sutter2024-01-021-4/+8
* datatype: rt_symbol_table_init() to search for iproute2 configsPhil Sutter2024-01-023-6/+36
* parser_bison: ensure all timeout policy names are releasedFlorian Westphal2023-12-222-5/+34
* src: do not allow to chain more than 16 binopsFlorian Westphal2023-12-225-5/+53
* netlink: fix stack overflow due to erroneous roundingFlorian Westphal2023-12-202-3/+14
* evaluate: don't crash if object map does not refer to a valueFlorian Westphal2023-12-202-0/+11
* parser_bison: error out on duplicated type/typeof/element keywordsFlorian Westphal2023-12-191-2/+36
* tests: shell: add test to cover payload transport match and manglePablo Neira Ayuso2023-12-192-0/+180
* intervals: BUG on prefix expressions without valueFlorian Westphal2023-12-191-0/+3
* tcpopt: don't create exthdr expression without datatypeFlorian Westphal2023-12-192-1/+2
* intervals: set_to_range can be staticFlorian Westphal2023-12-162-2/+3
* evaluate: fix stack overflow with huge priority stringFlorian Westphal2023-12-152-1/+6
* netlink: fix stack buffer overflow with sub-reg sized prefixesFlorian Westphal2023-12-152-2/+10
* src: reject large raw payload and concat expressionsFlorian Westphal2023-12-155-0/+28
* evaluate: exthdr: statement arg must be not be a rangeFlorian Westphal2023-12-142-3/+17
* netlink: don't crash if prefix for < byte is requestedFlorian Westphal2023-12-147-1/+63
* Revert "evaluate: error out when existing set has incompatible key"Florian Westphal2023-12-145-15/+30
* evaluate: fix gmp assertion with too-large reject codeFlorian Westphal2023-12-142-0/+8
* meta: fix tc classid parsing out-of-bounds accessFlorian Westphal2023-12-132-20/+15
* evaluate: error out when existing set has incompatible keyFlorian Westphal2023-12-132-0/+15
* evaluate: stmt_nat: set reference must point to a mapFlorian Westphal2023-12-132-0/+19
* parser_bison: fix memory leaks on hookspec error processingFlorian Westphal2023-12-132-0/+28
* parser_bison: close chain scope before chain releaseFlorian Westphal2023-12-132-0/+6
* parser_bison: fix ct scope underflow if ct helper section is duplicatedFlorian Westphal2023-12-122-4/+25
* parser_bison: make sure obj_free releases timeout policiesFlorian Westphal2023-12-122-0/+6
* netlink_linearize: avoid strict-overflow warning in netlink_gen_bitwise()Thomas Haller2023-12-121-4/+3