summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* evaluate: prevent merge of sets with incompatible keysFlorian Westphal4 days3-1/+26
* evaluate: check that set type is identical before mergingFlorian Westphal5 days3-2/+52
* evaluate: avoid double-free on error handling of bogus objref mapsFlorian Westphal5 days2-1/+11
* evaluate: make sure chain jump name comes with a null byteFlorian Westphal5 days2-5/+24
* json: reject too long interface namesFlorian Westphal5 days2-2/+105
* tests/py: clean up set backend support falloutFlorian Westphal6 days1-1/+1
* src: use EXPR_RANGE_VALUE in interval mapsPablo Neira Ayuso7 days3-9/+49
* expression: constant range is not a singletonPablo Neira Ayuso7 days1-1/+1
* src: use constant range expression for interval+concatenation setsPablo Neira Ayuso7 days2-3/+15
* parser_bison: allow delete command with map via handlePablo Neira Ayuso7 days3-1/+6
* parser_bison: only reset by name is supported by nowPablo Neira Ayuso7 days2-2/+4
* cache: pass name to cache_add()Pablo Neira Ayuso7 days2-35/+16
* cache: assert name is non-nul when looking upPablo Neira Ayuso7 days1-2/+9
* rule: skip fuzzy lookup if object name is not availablePablo Neira Ayuso7 days1-0/+12
* tests: shell: add feature check for count output changeFlorian Westphal8 days11-27/+65
* src: print count variable in normal set listingsFlorian Westphal8 days3-3/+11
* debug: include kernel set information on cache fillFlorian Westphal8 days2-2/+16
* tests/py: prepare for set debug changeFlorian Westphal8 days1-5/+10
* src: BASECHAIN flag no longer implies presence of priority expressionFlorian Westphal8 days2-6/+16
* evaluate: restrict allowed subtypes of concatenationsFlorian Westphal8 days3-1/+70
* evaluate: rename recursion counter to recursion.binopFlorian Westphal8 days2-7/+11
* test: shell: Add rate_limit test case for 'limit statement'.Yi Chen8 days2-0/+136
* test: shell: Add wait_local_port_listen() helper to lib.shYi Chen8 days3-3/+27
* test: shell: Introduce $NFT_TEST_LIBRARY_FILE, helper/lib.shYi Chen8 days4-37/+45
* test: shell: nat_ftp: test files must be world-readableFlorian Westphal8 days1-0/+1
* test: shell: Don't use system nft binaryYi Chen8 days3-4/+4
* evaluate: don't BUG on unexpected base datatypeFlorian Westphal12 days2-1/+13
* netlink: Avoid crash upon missing NFTNL_OBJ_CT_TIMEOUT_ARRAY attributePhil Sutter2025-06-121-3/+4
* tests: py: Properly fix JSON equivalents for netdev/reject.tPhil Sutter2025-06-122-21/+126
* tests: shell: Adjust to ifname-based hooksPhil Sutter2025-06-125-2/+34
* tests: monitor: Fix for single flag array avoidancePhil Sutter2025-06-127-8/+8
* json: Dump flowtable hook spec only if presentPhil Sutter2025-06-122-9/+15
* monitor: Correctly print flowtable updatesPhil Sutter2025-06-121-5/+9
* netlink: Do not allocate a bogus flowtable priority exprPhil Sutter2025-06-121-2/+4
* netlink: Fix for potential crash parsing a flowtablePhil Sutter2025-06-121-1/+1
* mnl: catch bogus expressions before crashingFlorian Westphal2025-06-121-0/+11
* doc: Basic documentation of anonymous chainsPhil Sutter2025-06-112-4/+18
* tests: shell: Add a test case for FTP helper combined with NAT.Yi Chen2025-06-104-0/+190
* tests: helpers: suppress mount error messagesFlorian Westphal2025-06-061-1/+1
* json: work around fuzzer-induced assert crashesFlorian Westphal2025-06-052-131/+146
* json: prevent null deref if chain->policy is not setFlorian Westphal2025-06-043-6/+26
* tests: py: fix json single-flag output for fib & synproxyFlorian Westphal2025-06-042-0/+49
* tests: shell: check for features not available in 5.4Pablo Neira Ayuso2025-05-294-1/+5
* cache: Tolerate object deserialization failuresPhil Sutter2025-05-251-6/+5
* netlink: Keep going after set element parsing failuresPhil Sutter2025-05-251-1/+3
* netlink: Pass netlink_ctx to netlink_delinearize_setelem()Phil Sutter2025-05-253-12/+12
* netlink_delinearize: Replace some BUG()s by error messagesPhil Sutter2025-05-251-6/+11
* tests: shell: check if kernel supports for cgroupsv2 matchingPablo Neira Ayuso2025-05-202-0/+8
* tests: shell: skip egress in netdev chain release path testPablo Neira Ayuso2025-05-201-7/+11
* netlink: Catch unknown types when deserializing objectsPhil Sutter2025-05-201-0/+4