summaryrefslogtreecommitdiffstats
path: root/src/evaluate.c
Commit message (Expand)AuthorAgeFilesLines
* evaluate: remove object from cache on delete object commandPablo Neira Ayuso2021-05-021-0/+37
* evaluate: remove flowtable from cache on delete flowtable commandPablo Neira Ayuso2021-05-021-0/+24
* evaluate: remove set from cache on delete set commandPablo Neira Ayuso2021-05-021-0/+24
* evaluate: remove chain from cache on delete chain commandPablo Neira Ayuso2021-05-021-0/+24
* cache: add hashtable cache for tablePablo Neira Ayuso2021-05-021-50/+78
* evaluate: add object to the cachePablo Neira Ayuso2021-05-021-0/+10
* evaluate: add flowtable to the cachePablo Neira Ayuso2021-05-021-0/+3
* evaluate: add set to the cachePablo Neira Ayuso2021-05-021-0/+4
* cache: add hashtable cache for flowtablePablo Neira Ayuso2021-05-021-3/+3
* cache: add hashtable cache for objectPablo Neira Ayuso2021-05-021-1/+1
* src: consolidate nft_cache infrastructurePablo Neira Ayuso2021-05-021-1/+1
* src: pass chain name to chain_cache_find()Pablo Neira Ayuso2021-05-021-5/+5
* src: unbreak deletion by table handlePablo Neira Ayuso2021-05-021-0/+3
* evaluate: check if nat statement map specifies a transport header exprFlorian Westphal2021-04-291-1/+37
* cache: add hashtable cache for setsPablo Neira Ayuso2021-04-031-10/+10
* evaluate: use chain hashtable for lookupsPablo Neira Ayuso2021-04-031-4/+4
* netlink: don't crash when set elements are not evaluated as expectedFlorian Westphal2021-04-011-0/+3
* evaluate: set evaluation context for set elementsFlorian Westphal2021-02-161-2/+9
* evaluate: pick data element byte order, not dtype oneFlorian Westphal2021-02-161-1/+1
* evaluate: incorrect usage of stmt_binary_error() in rejectPablo Neira Ayuso2021-02-091-3/+2
* src: add negation match on singleton bitmask valuePablo Neira Ayuso2021-02-051-0/+8
* evaluate: do not crash if dynamic set has no statementsFlorian Westphal2021-02-051-4/+6
* reject: Fix for missing dependencies in netdev familyPhil Sutter2021-01-271-1/+2
* src: evaluate: reset context maxlen value before prio evaluationFlorian Westphal2021-01-261-2/+2
* exthdr: remove tcp dependency for tcp option matchingFlorian Westphal2021-01-261-3/+1
* evaluate: disallow ct original {s,d}ddr from concatenationsPablo Neira Ayuso2021-01-251-0/+17
* evaluate: disallow ct original {s,d}ddr from mapsPablo Neira Ayuso2021-01-151-0/+6
* src: set on flags to request multi-statement supportPablo Neira Ayuso2021-01-041-0/+8
* src: add set element multi-statement supportPablo Neira Ayuso2020-12-181-14/+43
* src: add support for multi-statement in dynamic sets and mapsPablo Neira Ayuso2020-12-171-10/+14
* src: add auto-dependencies for ipv6 icmp6Florian Westphal2020-12-091-1/+1
* src: add auto-dependencies for ipv4 icmpFlorian Westphal2020-12-091-1/+19
* tcpopt: split tcpopt_hdr_fields into per-option enumFlorian Westphal2020-11-091-10/+6
* evaluate: add netdev support for reject defaultJose M. Guisado Gomez2020-11-021-0/+1
* src: ingress inet supportPablo Neira Ayuso2020-10-131-2/+6
* evaluate: Reject quoted strings containing only wildcardPhil Sutter2020-10-061-2/+5
* src: context tracking for multiple transport protocolsPablo Neira Ayuso2020-09-151-2/+12
* evaluate: remove one indent level in __expr_evaluate_payload()Pablo Neira Ayuso2020-09-141-25/+24
* socket: add support for "wildcard" keyBalazs Scheidler2020-08-291-1/+3
* src: add chain hashtable cachePablo Neira Ayuso2020-08-261-3/+3
* evaluate: disregard ct address matching without familyPablo Neira Ayuso2020-07-311-0/+6
* evaluate: UAF in hook priority expressionPablo Neira Ayuso2020-07-291-1/+1
* evaluate: memleak in invalid default policy definitionPablo Neira Ayuso2020-07-291-1/+3
* evaluate: remove table from cache on delete tablePablo Neira Ayuso2020-07-291-0/+15
* src: remove cache lookups after the evaluation phasePablo Neira Ayuso2020-07-291-5/+8
* evaluate: flush set cache from the evaluation phasePablo Neira Ayuso2020-07-291-0/+15
* evaluate: bail out with concatenations and singleton valuesPablo Neira Ayuso2020-07-241-0/+4
* evaluate: replace variable expression by the value expressionPablo Neira Ayuso2020-07-221-1/+4
* evaluate: permit get element on mapsFlorian Westphal2020-07-221-12/+0
* evaluate: use evaluate_expr_variable() for chain policy evaluationPablo Neira Ayuso2020-07-211-20/+3