summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Expand)AuthorAgeFilesLines
* evaluate: fix hash expression maxvalHEADmasterFlorian Westphal35 hours1-2/+6
* rule: memleak of list of timeout policiesPablo Neira Ayuso37 hours2-0/+9
* parser_bison: memleak in osf flagsPablo Neira Ayuso37 hours1-0/+2
* netlink_delinearize: memleak when listing ct event rulePablo Neira Ayuso37 hours1-4/+7
* segtree: memleak in error path of the set to segtree conversionPablo Neira Ayuso37 hours1-2/+14
* netlink_delinearize: memleak in string netlink postprocessingPablo Neira Ayuso37 hours1-0/+2
* evaluate: memleak in binary operation transfer to RHSPablo Neira Ayuso37 hours1-2/+0
* evaluate: unbreak verdict maps with implicit map with interval concatenationsPablo Neira Ayuso37 hours1-0/+8
* evaluate: do not skip mapping elementsPablo Neira Ayuso37 hours1-7/+19
* payload: do not remove icmp echo dependencyFlorian Westphal3 days1-24/+37
* netlink_delinearize: add missing icmp id/sequence supportFlorian Westphal3 days1-3/+65
* src: replace opencoded NFT_SET_ANONYMOUS set flag check by set_is_anonymous()Pablo Neira Ayuso5 days4-4/+4
* src: add xzalloc_array() and use it to allocate the expression hashtablePablo Neira Ayuso5 days2-1/+11
* evaluate: add set to cache oncePablo Neira Ayuso5 days1-3/+0
* rule: Fix for potential off-by-one in cmd_add_loc()Phil Sutter5 days1-1/+1
* netlink_delinearize: Fix suspicious calloc() callPhil Sutter5 days1-3/+2
* netlink: Avoid memleak in error path of netlink_delinearize_obj()Phil Sutter5 days1-0/+1
* netlink: Avoid memleak in error path of netlink_delinearize_table()Phil Sutter5 days1-0/+1
* netlink: Avoid memleak in error path of netlink_delinearize_chain()Phil Sutter5 days1-0/+1
* netlink: Avoid memleak in error path of netlink_delinearize_set()Phil Sutter5 days1-2/+2
* json: Drop pointless assignment in exthdr_expr_json()Phil Sutter5 days1-1/+0
* evaluate: Mark fall through case in str2hooknum()Phil Sutter5 days1-0/+1
* parser_json: Fix for memleak in tcp option error pathPhil Sutter5 days1-3/+3
* parser_bison: Fix for implicit declaration of isalnumPhil Sutter5 days1-0/+1
* evaluate: restore interval + concatenation in anonymous setPablo Neira Ayuso8 days1-8/+9
* src: add vlan deiPablo Neira Ayuso8 days3-0/+4
* src: add support for base hook dumpingFlorian Westphal10 days5-3/+397
* scanner: add list cmd parser scopeFlorian Westphal10 days2-7/+11
* segtree: Fix segfault when restoring a huge interval setPhil Sutter10 days1-4/+6
* json: Print warnings to stderr rather than stdoutKerin Millar11 days1-3/+5
* netlink: quick sort array of devicesPablo Neira Ayuso11 days1-0/+18
* cmd: check for table mismatch first in error reportingPablo Neira Ayuso11 days1-14/+57
* rule: rework CMD_OBJ_SETELEMS logicPablo Neira Ayuso12 days1-19/+26
* evaluate: remove anon sets with exactly one elementFlorian Westphal12 days1-2/+19
* statement: connlimit: remove extra whitespace in print functionPablo Neira Ayuso2021-06-041-1/+1
* json: catchall element supportFlorian Westphal2021-06-023-10/+7
* json: fix parse of flagcmp expressionFlorian Westphal2021-06-021-1/+1
* json: fix base chain outputFlorian Westphal2021-06-021-1/+1
* expression: display an error on unknown datatypePablo Neira Ayuso2021-05-241-1/+4
* evaluate: allow == and != in the new shortcut syntax to match for flagsPablo Neira Ayuso2021-05-241-0/+4
* expr_postprocess: Avoid an unintended fall throughPhil Sutter2021-05-201-0/+1
* rule: skip exact matches on fuzzy lookupPablo Neira Ayuso2021-05-201-19/+0
* cmd: typo in chain fuzzy lookupPablo Neira Ayuso2021-05-201-1/+1
* libnftables: location-based error reporting for chain typePablo Neira Ayuso2021-05-205-7/+14
* exthdr: Implement SCTP Chunk matchingPhil Sutter2021-05-198-2/+506
* json: Simplify non-tcpopt exthdr printing a bitPhil Sutter2021-05-191-11/+7
* scanner: sctp: Move to own scopePhil Sutter2021-05-192-4/+9
* datatype: skip cgroupv2 rootfs in listingPablo Neira Ayuso2021-05-181-1/+2
* src: use PRIu64 formatPablo Neira Ayuso2021-05-182-2/+2
* parser_bison: add shortcut syntax for matching flags without binary operationsPablo Neira Ayuso2021-05-165-22/+140