summaryrefslogtreecommitdiffstats
path: root/src/evaluate.c
Commit message (Expand)AuthorAgeFilesLines
...
* cache: add hashtable cache for setsPablo Neira Ayuso2021-04-031-10/+10
* evaluate: use chain hashtable for lookupsPablo Neira Ayuso2021-04-031-4/+4
* netlink: don't crash when set elements are not evaluated as expectedFlorian Westphal2021-04-011-0/+3
* evaluate: set evaluation context for set elementsFlorian Westphal2021-02-161-2/+9
* evaluate: pick data element byte order, not dtype oneFlorian Westphal2021-02-161-1/+1
* evaluate: incorrect usage of stmt_binary_error() in rejectPablo Neira Ayuso2021-02-091-3/+2
* src: add negation match on singleton bitmask valuePablo Neira Ayuso2021-02-051-0/+8
* evaluate: do not crash if dynamic set has no statementsFlorian Westphal2021-02-051-4/+6
* reject: Fix for missing dependencies in netdev familyPhil Sutter2021-01-271-1/+2
* src: evaluate: reset context maxlen value before prio evaluationFlorian Westphal2021-01-261-2/+2
* exthdr: remove tcp dependency for tcp option matchingFlorian Westphal2021-01-261-3/+1
* evaluate: disallow ct original {s,d}ddr from concatenationsPablo Neira Ayuso2021-01-251-0/+17
* evaluate: disallow ct original {s,d}ddr from mapsPablo Neira Ayuso2021-01-151-0/+6
* src: set on flags to request multi-statement supportPablo Neira Ayuso2021-01-041-0/+8
* src: add set element multi-statement supportPablo Neira Ayuso2020-12-181-14/+43
* src: add support for multi-statement in dynamic sets and mapsPablo Neira Ayuso2020-12-171-10/+14
* src: add auto-dependencies for ipv6 icmp6Florian Westphal2020-12-091-1/+1
* src: add auto-dependencies for ipv4 icmpFlorian Westphal2020-12-091-1/+19
* tcpopt: split tcpopt_hdr_fields into per-option enumFlorian Westphal2020-11-091-10/+6
* evaluate: add netdev support for reject defaultJose M. Guisado Gomez2020-11-021-0/+1
* src: ingress inet supportPablo Neira Ayuso2020-10-131-2/+6
* evaluate: Reject quoted strings containing only wildcardPhil Sutter2020-10-061-2/+5
* src: context tracking for multiple transport protocolsPablo Neira Ayuso2020-09-151-2/+12
* evaluate: remove one indent level in __expr_evaluate_payload()Pablo Neira Ayuso2020-09-141-25/+24
* socket: add support for "wildcard" keyBalazs Scheidler2020-08-291-1/+3
* src: add chain hashtable cachePablo Neira Ayuso2020-08-261-3/+3
* evaluate: disregard ct address matching without familyPablo Neira Ayuso2020-07-311-0/+6
* evaluate: UAF in hook priority expressionPablo Neira Ayuso2020-07-291-1/+1
* evaluate: memleak in invalid default policy definitionPablo Neira Ayuso2020-07-291-1/+3
* evaluate: remove table from cache on delete tablePablo Neira Ayuso2020-07-291-0/+15
* src: remove cache lookups after the evaluation phasePablo Neira Ayuso2020-07-291-5/+8
* evaluate: flush set cache from the evaluation phasePablo Neira Ayuso2020-07-291-0/+15
* evaluate: bail out with concatenations and singleton valuesPablo Neira Ayuso2020-07-241-0/+4
* evaluate: replace variable expression by the value expressionPablo Neira Ayuso2020-07-221-1/+4
* evaluate: permit get element on mapsFlorian Westphal2020-07-221-12/+0
* evaluate: use evaluate_expr_variable() for chain policy evaluationPablo Neira Ayuso2020-07-211-20/+3
* src: allow to use variables in flowtable and chain devicesPablo Neira Ayuso2020-07-211-0/+69
* evaluate: UAF in stmt_evaluate_log_prefix()Pablo Neira Ayuso2020-07-151-5/+4
* src: support for implicit chain bindingsPablo Neira Ayuso2020-07-151-1/+60
* src: allow for variables in the log prefix stringPablo Neira Ayuso2020-07-081-1/+48
* src: Allow for empty set variable definitionPablo Neira Ayuso2020-07-041-0/+3
* evaluate: remove superfluous check in set_evaluate()Pablo Neira Ayuso2020-06-071-5/+0
* evaluate: missing datatype definition in implicit_set_declaration()Pablo Neira Ayuso2020-06-071-10/+12
* src: add devices to an existing flowtablePablo Neira Ayuso2020-06-021-11/+10
* evaluate: Perform set evaluation on implicitly declared (anonymous) setsStefano Brivio2020-05-281-10/+10
* evaluate: enable reject with 802.1qMichael Braun2020-05-281-1/+1
* src: rename CMD_OBJ_SETELEM to CMD_OBJ_ELEMENTSPablo Neira Ayuso2020-05-141-3/+3
* mnl: fix error rule reporting with missing table/chain and anonymous setsPablo Neira Ayuso2020-05-141-0/+1
* evaluate: fix memleak in stmt_evaluate_reject_icmp()Pablo Neira Ayuso2020-05-061-0/+2
* src: ct_timeout: release policy string and state listPablo Neira Ayuso2020-05-051-0/+1