summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Expand)AuthorAgeFilesLines
* evaluate: permit use of host-endian constant values in set lookup keysPablo Neira Ayuso2024-02-132-7/+17
* netlink_delinearize: move concat and value postprocessing to helpersFlorian Westphal2024-02-131-35/+47
* cache: Always set NFT_CACHE_TERSE for list cmd with --tersePhil Sutter2024-02-131-7/+3
* netlink_linearize: add assertion to catch for buggy byteorderPablo Neira Ayuso2024-02-091-0/+2
* evaluate: skip byteorder conversion for selector smaller than 2 bytesPablo Neira Ayuso2024-02-091-5/+7
* cache: Optimize caching for 'list tables' commandPhil Sutter2024-02-071-1/+5
* evaluate: fix check for unknown in cmd_op_to_name谢致邦 (XIE Zhibang)2024-02-071-1/+1
* evaluate: don't assert on net/transport header conflictFlorian Westphal2024-02-071-36/+33
* datatype: display 0s time datatypePablo Neira Ayuso2024-02-071-5/+19
* json: Support sets' auto-merge optionPhil Sutter2024-01-312-0/+3
* rule: fix sym refcount assertionFlorian Westphal2024-01-151-1/+5
* evaluate: error out when store needs more than one 128bit register of align f...Florian Westphal2024-01-151-0/+5
* parser: reject raw payload expressions with 0 lengthFlorian Westphal2024-01-122-5/+31
* payload: only assert if l2 header base has no lengthFlorian Westphal2024-01-121-2/+1
* evaluate: release mpz type in expr_evaluate_list() error pathPablo Neira Ayuso2024-01-121-3/+9
* evaluate: release key expression in error path of implicit map with unknown d...Pablo Neira Ayuso2024-01-121-1/+3
* evaluate: bail out if anonymous concat set defines a non concat expressionPablo Neira Ayuso2024-01-121-2/+31
* evaluate: do not fetch next expression on runaway number of concatenation com...Pablo Neira Ayuso2024-01-121-2/+2
* evaluate: skip anonymous set optimization for concatenationsPablo Neira Ayuso2024-01-121-9/+11
* evaluate: add missing range checks for dup,fwd and payload statementsFlorian Westphal2024-01-111-38/+50
* evaluate: tproxy: move range error checks after arg evaluationFlorian Westphal2024-01-111-6/+6
* evaluate: error out when expression has no datatypeFlorian Westphal2024-01-111-0/+5
* datatype: do not assert when value exceeds expected widthFlorian Westphal2024-01-081-2/+4
* datatype: Describe rt symbol tablesPhil Sutter2024-01-024-0/+55
* datatype: Initialize rt_symbol_tables' base fieldPhil Sutter2024-01-021-4/+8
* datatype: rt_symbol_table_init() to search for iproute2 configsPhil Sutter2024-01-023-6/+36
* parser_bison: ensure all timeout policy names are releasedFlorian Westphal2023-12-221-5/+27
* src: do not allow to chain more than 16 binopsFlorian Westphal2023-12-222-4/+42
* netlink: fix stack overflow due to erroneous roundingFlorian Westphal2023-12-201-3/+8
* evaluate: don't crash if object map does not refer to a valueFlorian Westphal2023-12-201-0/+5
* parser_bison: error out on duplicated type/typeof/element keywordsFlorian Westphal2023-12-191-2/+36
* intervals: BUG on prefix expressions without valueFlorian Westphal2023-12-191-0/+3
* tcpopt: don't create exthdr expression without datatypeFlorian Westphal2023-12-191-1/+1
* intervals: set_to_range can be staticFlorian Westphal2023-12-161-1/+3
* evaluate: fix stack overflow with huge priority stringFlorian Westphal2023-12-151-1/+1
* netlink: fix stack buffer overflow with sub-reg sized prefixesFlorian Westphal2023-12-151-2/+5
* src: reject large raw payload and concat expressionsFlorian Westphal2023-12-152-0/+15
* evaluate: exthdr: statement arg must be not be a rangeFlorian Westphal2023-12-141-3/+16
* netlink: don't crash if prefix for < byte is requestedFlorian Westphal2023-12-141-1/+2
* Revert "evaluate: error out when existing set has incompatible key"Florian Westphal2023-12-141-3/+0
* evaluate: fix gmp assertion with too-large reject codeFlorian Westphal2023-12-141-0/+7
* meta: fix tc classid parsing out-of-bounds accessFlorian Westphal2023-12-131-20/+9
* evaluate: error out when existing set has incompatible keyFlorian Westphal2023-12-131-0/+3
* evaluate: stmt_nat: set reference must point to a mapFlorian Westphal2023-12-131-0/+9
* parser_bison: fix memory leaks on hookspec error processingFlorian Westphal2023-12-131-0/+7
* parser_bison: close chain scope before chain releaseFlorian Westphal2023-12-131-0/+1
* parser_bison: fix ct scope underflow if ct helper section is duplicatedFlorian Westphal2023-12-121-4/+11
* parser_bison: make sure obj_free releases timeout policiesFlorian Westphal2023-12-121-0/+1
* netlink_linearize: avoid strict-overflow warning in netlink_gen_bitwise()Thomas Haller2023-12-121-4/+3
* evaluate: fix bogus assertion failure with boolean datatypeFlorian Westphal2023-12-121-3/+4