summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
...
* src: do not allow to chain more than 16 binopsFlorian Westphal2023-12-225-5/+53
* netlink: fix stack overflow due to erroneous roundingFlorian Westphal2023-12-202-3/+14
* evaluate: don't crash if object map does not refer to a valueFlorian Westphal2023-12-202-0/+11
* parser_bison: error out on duplicated type/typeof/element keywordsFlorian Westphal2023-12-191-2/+36
* tests: shell: add test to cover payload transport match and manglePablo Neira Ayuso2023-12-192-0/+180
* intervals: BUG on prefix expressions without valueFlorian Westphal2023-12-191-0/+3
* tcpopt: don't create exthdr expression without datatypeFlorian Westphal2023-12-192-1/+2
* intervals: set_to_range can be staticFlorian Westphal2023-12-162-2/+3
* evaluate: fix stack overflow with huge priority stringFlorian Westphal2023-12-152-1/+6
* netlink: fix stack buffer overflow with sub-reg sized prefixesFlorian Westphal2023-12-152-2/+10
* src: reject large raw payload and concat expressionsFlorian Westphal2023-12-155-0/+28
* evaluate: exthdr: statement arg must be not be a rangeFlorian Westphal2023-12-142-3/+17
* netlink: don't crash if prefix for < byte is requestedFlorian Westphal2023-12-147-1/+63
* Revert "evaluate: error out when existing set has incompatible key"Florian Westphal2023-12-145-15/+30
* evaluate: fix gmp assertion with too-large reject codeFlorian Westphal2023-12-142-0/+8
* meta: fix tc classid parsing out-of-bounds accessFlorian Westphal2023-12-132-20/+15
* evaluate: error out when existing set has incompatible keyFlorian Westphal2023-12-132-0/+15
* evaluate: stmt_nat: set reference must point to a mapFlorian Westphal2023-12-132-0/+19
* parser_bison: fix memory leaks on hookspec error processingFlorian Westphal2023-12-132-0/+28
* parser_bison: close chain scope before chain releaseFlorian Westphal2023-12-132-0/+6
* parser_bison: fix ct scope underflow if ct helper section is duplicatedFlorian Westphal2023-12-122-4/+25
* parser_bison: make sure obj_free releases timeout policiesFlorian Westphal2023-12-122-0/+6
* netlink_linearize: avoid strict-overflow warning in netlink_gen_bitwise()Thomas Haller2023-12-121-4/+3
* evaluate: fix bogus assertion failure with boolean datatypeFlorian Westphal2023-12-123-3/+30
* netlink: add and use nft_data_memcpy helperFlorian Westphal2023-12-122-11/+16
* parser_bison: fix memleak in meta set error handlingFlorian Westphal2023-12-112-0/+6
* parser_bison: fix objref statement corruptionFlorian Westphal2023-12-113-37/+71
* evaluate: validate chain max lengthFlorian Westphal2023-12-113-1/+45
* tests: py: missing json output in meta.t with vlan mappingPablo Neira Ayuso2023-12-111-0/+60
* evaluate: reset statement length context before evaluating statementPablo Neira Ayuso2023-12-087-34/+88
* tests: py: missing json output in never merge across non-expression statementsPablo Neira Ayuso2023-12-071-0/+31
* tests: rename file to lowercaseFlorian Westphal2023-12-061-0/+0
* parser: tcpopt: fix tcp option parsing with NUM + length fieldFlorian Westphal2023-12-064-10/+93
* tests: shell: add test case for sets without keyFlorian Westphal2023-12-061-0/+12
* evaluate: reject set definition with no keyPablo Neira Ayuso2023-12-061-2/+6
* monitor: add support for concatenated set rangesPablo Neira Ayuso2023-12-062-2/+21
* tests: shell: flush ruleset with -U after feature probingPablo Neira Ayuso2023-12-061-0/+3
* evaluate: fix double free on dtype releaseFlorian Westphal2023-12-052-1/+7
* evaluate: catch implicit map expressions without known datatypeFlorian Westphal2023-12-052-0/+5
* evaluate: reject attempt to update a setFlorian Westphal2023-12-052-0/+15
* evaluate: disable meta set with rangesFlorian Westphal2023-12-052-0/+18
* evaluate: error out if basetypes are differentFlorian Westphal2023-12-052-2/+10
* evaluate: guard against NULL basetypeFlorian Westphal2023-12-052-1/+2
* evaluate: handle invalid mapping expressions gracefullyFlorian Westphal2023-12-052-2/+3
* evaluate: turn assert into real error checkFlorian Westphal2023-12-052-6/+24
* tests/shell: use generated ruleset for `nft --check`Thomas Haller2023-12-031-22/+26
* evaluate: prevent assert when evaluating very large shift valuesFlorian Westphal2023-12-032-2/+12
* main: Refer to nft_options in nft_options_check()Phil Sutter2023-12-031-10/+9
* main: Reduce indenting in nft_options_check()Phil Sutter2023-12-031-15/+16
* tests: shell: add missing .nodump fileFlorian Westphal2023-12-011-0/+0