summaryrefslogtreecommitdiffstats
path: root/src/evaluate.c
Commit message (Expand)AuthorAgeFilesLines
* evaluate: disregard ct address matching without familyPablo Neira Ayuso4 days1-0/+6
* evaluate: UAF in hook priority expressionPablo Neira Ayuso6 days1-1/+1
* evaluate: memleak in invalid default policy definitionPablo Neira Ayuso6 days1-1/+3
* evaluate: remove table from cache on delete tablePablo Neira Ayuso6 days1-0/+15
* src: remove cache lookups after the evaluation phasePablo Neira Ayuso6 days1-5/+8
* evaluate: flush set cache from the evaluation phasePablo Neira Ayuso6 days1-0/+15
* evaluate: bail out with concatenations and singleton valuesPablo Neira Ayuso11 days1-0/+4
* evaluate: replace variable expression by the value expressionPablo Neira Ayuso13 days1-1/+4
* evaluate: permit get element on mapsFlorian Westphal14 days1-12/+0
* evaluate: use evaluate_expr_variable() for chain policy evaluationPablo Neira Ayuso2020-07-211-20/+3
* src: allow to use variables in flowtable and chain devicesPablo Neira Ayuso2020-07-211-0/+69
* evaluate: UAF in stmt_evaluate_log_prefix()Pablo Neira Ayuso2020-07-151-5/+4
* src: support for implicit chain bindingsPablo Neira Ayuso2020-07-151-1/+60
* src: allow for variables in the log prefix stringPablo Neira Ayuso2020-07-081-1/+48
* src: Allow for empty set variable definitionPablo Neira Ayuso2020-07-041-0/+3
* evaluate: remove superfluous check in set_evaluate()Pablo Neira Ayuso2020-06-071-5/+0
* evaluate: missing datatype definition in implicit_set_declaration()Pablo Neira Ayuso2020-06-071-10/+12
* src: add devices to an existing flowtablePablo Neira Ayuso2020-06-021-11/+10
* evaluate: Perform set evaluation on implicitly declared (anonymous) setsStefano Brivio2020-05-281-10/+10
* evaluate: enable reject with 802.1qMichael Braun2020-05-281-1/+1
* src: rename CMD_OBJ_SETELEM to CMD_OBJ_ELEMENTSPablo Neira Ayuso2020-05-141-3/+3
* mnl: fix error rule reporting with missing table/chain and anonymous setsPablo Neira Ayuso2020-05-141-0/+1
* evaluate: fix memleak in stmt_evaluate_reject_icmp()Pablo Neira Ayuso2020-05-061-0/+2
* src: ct_timeout: release policy string and state listPablo Neira Ayuso2020-05-051-0/+1
* src: add rule_stmt_insert_at() and use itPablo Neira Ayuso2020-05-051-4/+5
* evaluate: incorrect byteorder with typeof and integer_datatypePablo Neira Ayuso2020-04-291-1/+2
* evaluate: fix crash when handling concatenation without mapPablo Neira Ayuso2020-04-281-0/+3
* src: add STMT_NAT_F_CONCAT flag and use itPablo Neira Ayuso2020-04-281-1/+1
* src: NAT support for intervals in mapsPablo Neira Ayuso2020-04-281-2/+43
* src: Set NFT_SET_CONCAT flag for sets with concatenated rangesStefano Brivio2020-04-141-1/+8
* evaluate: check for device in non-netdev chainsPablo Neira Ayuso2020-03-311-0/+3
* evaluate: improve error reporting in netdev ingress chainPablo Neira Ayuso2020-03-311-2/+9
* rule: add hook_specPablo Neira Ayuso2020-03-311-9/+9
* evaluate: display error if set statement is missingPablo Neira Ayuso2020-03-271-7/+15
* src: support for counter in set definitionPablo Neira Ayuso2020-03-201-0/+9
* evaluate: add range specified flag setting (missing NF_NAT_RANGE_PROTO_SPECIF...Pablo Neira Ayuso2020-03-191-0/+3
* src: fix leaks.Jeremy Sowden2020-03-041-0/+2
* evaluate: no need to swap byte-order for values of fewer than 16 bits.Jeremy Sowden2020-03-041-1/+1
* evaluate: convert the byte-order of payload statement arguments.Jeremy Sowden2020-03-041-0/+5
* evaluate: don't evaluate payloads twice.Jeremy Sowden2020-03-041-0/+5
* evaluate: simplify calculation of payload size.Jeremy Sowden2020-03-041-2/+2
* evaluate: add separate variables for lshift and xor binops.Jeremy Sowden2020-03-041-17/+17
* evaluate: stmt_evaluate_nat_map() only if stmt->nat.ipportmap == truePablo Neira Ayuso2020-02-251-17/+11
* src: nat concatenation support with anonymous mapsPablo Neira Ayuso2020-02-241-3/+20
* src: allow nat maps containing both ip(6) address and portFlorian Westphal2020-02-241-0/+56
* evaluate: add two new helpersFlorian Westphal2020-02-241-29/+32
* evaluate: process concat expressions when used as mapped-to exprFlorian Westphal2020-02-241-0/+4
* evaluate: print correct statement name on family mismatchFlorian Westphal2020-02-221-2/+3
* evaluate: change shift byte-order to host-endian.Jeremy Sowden2020-02-071-1/+1
* evaluate: correct variable name.Jeremy Sowden2020-02-071-6/+6