summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Expand)AuthorAgeFilesLines
* datatype: fix leak and cleanup reference counting for struct datatypeThomas Haller2023-11-036-50/+77
* evaluate: fix get element for concatenated setFlorian Westphal2023-11-031-4/+7
* evaluate: revisit anonymous set with single element optimizationPablo Neira Ayuso2023-11-031-20/+40
* evaluate: fix check for truncation in stmt_evaluate_log_prefix()Thomas Haller2023-11-031-1/+1
* evaluate: do not remove anonymous set with protocol flags and single elementPablo Neira Ayuso2023-11-021-1/+6
* evaluate: Drop dead code from expr_evaluate_mapping()Phil Sutter2023-11-021-11/+8
* parser: permit gc-interval in map declarationsFlorian Westphal2023-11-021-0/+5
* parser: allow ct timeouts to use time_spec valuesFlorian Westphal2023-11-022-6/+13
* libnftables: Drop cache in -c/--check modePablo Neira Ayuso2023-11-021-2/+5
* netlink: delinearize: copy set keytype if neededFlorian Westphal2023-11-021-0/+2
* expression: define .clone for catchall set elementPablo Neira Ayuso2023-11-021-2/+13
* parser: reject zero-length interface names in flowtablesFlorian Westphal2023-11-021-8/+12
* parser: reject zero-length interface namesFlorian Westphal2023-11-021-5/+31
* parser: don't assert on scope underflowsFlorian Westphal2023-11-021-2/+1
* evaluate: do not abort when prefix map has non-map elementFlorian Westphal2023-11-021-4/+13
* cache: include set elements in "nft set list"Florian Westphal2023-11-022-7/+3
* evaluate: set NFT_SET_EVAL flag if dynamic set already existsPablo Neira Ayuso2023-11-021-0/+8
* optimize: do not remove counter in verdict mapsPablo Neira Ayuso2023-11-021-7/+43
* evaluate: skip optimization if anonymous set uses stateful statementPablo Neira Ayuso2023-11-021-1/+1
* evaluate: allow stateful statements with anonymous verdict mapsPablo Neira Ayuso2023-11-021-1/+2
* netlink: restore typeof interval map data typeFlorian Westphal2023-11-021-1/+6
* netlink_delinearize: do not reset protocol context for nat protocol expressionPablo Neira Ayuso2023-11-021-3/+1
* evaluate: bogus missing transport protocolPablo Neira Ayuso2023-11-021-3/+8
* optimize: support for redirect and masqueradePablo Neira Ayuso2023-11-021-32/+119
* optimize: assert nat type on nat statement helperPablo Neira Ayuso2023-11-021-0/+4
* xt: Fix translation error pathPhil Sutter2023-11-021-4/+6
* intervals: use expression location when translating to intervalsPablo Neira Ayuso2023-11-021-2/+2
* evaluate: insert byte-order conversions for expressions between 9 and 15 bitsJeremy Sowden2023-11-021-1/+1
* xt: Fix fallback printing for extensions matching keywordsPhil Sutter2023-11-022-2/+2
* parser_bison: allow to use quota in setsPablo Neira Ayuso2023-11-021-0/+16
* src: expand table command before evaluationPablo Neira Ayuso2023-11-023-41/+26
* netlink_delinearize: Sanitize concat data element decodingPhil Sutter2023-11-021-1/+1
* evaluate: expand value to range when nat mapping contains intervalsPablo Neira Ayuso2023-11-021-2/+45
* evaluate: infer family from mappingPablo Neira Ayuso2023-11-021-5/+40
* evaluate: print error on missing family in nat statementPablo Neira Ayuso2023-11-021-3/+29
* optimize: infer family for nat mappingPablo Neira Ayuso2023-11-021-2/+21
* optimize: ignore existing nat mappingPablo Neira Ayuso2023-11-021-0/+7
* rule: expand standalone chain that contains rulesPablo Neira Ayuso2023-11-021-3/+12
* optimize: select merge criteria based on candidates rulesPablo Neira Ayuso2023-11-021-11/+11
* rule: add helper function to expand chain rules into commandsPablo Neira Ayuso2023-11-021-17/+22
* optimize: fix incorrect expansion into concatenation with verdict mapPablo Neira Ayuso2023-11-021-11/+22
* optimize: wrap code to build concatenation in helper functionPablo Neira Ayuso2023-11-021-7/+15
* evaluate: set eval ctx for add/update statements with integer constantsFlorian Westphal2023-11-021-2/+30
* optimize: Do not return garbage from stackPhil Sutter2023-11-021-1/+1
* intervals: restrict check missing elements fix to sets with no auto-mergePablo Neira Ayuso2023-11-021-5/+6
* mnl: dump_nf_hooks() leaks memory in error pathPhil Sutter2023-11-021-2/+9
* meta: parse_iso_date() returns booleanPhil Sutter2023-11-021-1/+1
* netlink: Fix for potential NULL-pointer derefPhil Sutter2023-11-021-1/+2
* optimize: Clarify chain_optimize() array allocationsPhil Sutter2023-11-021-3/+4
* ct: use inet_service_type for proto-src and proto-dstPablo Neira Ayuso2023-11-021-2/+2