]> git.ipfire.org Git - thirdparty/nftables.git/shortlog
thirdparty/nftables.git
2025-01-22  Florian Westphalnetlink: fix stack buffer overflow with sub-reg sized...
2025-01-22  Florian Westphalsrc: reject large raw payload and concat expressions
2025-01-22  Florian Westphalevaluate: exthdr: statement arg must be not be a range
2025-01-22  Florian Westphalnetlink: don't crash if prefix for < byte is requested
2025-01-22  Florian Westphalevaluate: fix gmp assertion with too-large reject code
2025-01-22  Florian Westphalevaluate: stmt_nat: set reference must point to a map
2025-01-22  Florian Westphalparser_bison: fix memory leaks on hookspec error processing
2025-01-22  Florian Westphalparser_bison: fix ct scope underflow if ct helper secti...
2025-01-22  Florian Westphalparser_bison: make sure obj_free releases timeout policies
2025-01-22  Florian Westphalevaluate: turn assert into real error check
2025-01-22  Florian Westphalevaluate: prevent assert when evaluating very large...
2025-01-22  Pablo Neira... evaluate: bogus error when adding devices to flowtable
2025-01-22  Pablo Neira... evaluate: place byteorder conversion before rshift...
2025-01-22  Pablo Neira... evaluate: reset statement length context only for set...
2025-01-22  Pablo Neira... evaluate: place byteorder conversion before rshift...
2025-01-22  Thomas Hallernetlink_linearize: avoid strict-overflow warning in...
2025-01-22  Pablo Neira... evaluate: fix memleak in prefix evaluation with wildcar...
2025-01-22  Florian Westphalevaluate: fix bogus assertion failure with boolean...
2025-01-22  Florian Westphalnetlink: add and use nft_data_memcpy helper
2025-01-22  Pablo Neira... evaluate: reject set in concatenation
2025-01-22  Pablo Neira... evaluate: perform mark datatype compatibility check...
2025-01-22  Pablo Neira... json: allow to specify comment on chain
2025-01-22  Pablo Neira... json: allow to specify comment on table
2025-01-22  Pablo Neira... evaluate: bail out if new flowtable does not specify...
2025-01-22  Jeremy Sowdennetlink_delinearize: correct type and byte-order of...
2025-01-22  Pablo Neira... payload: set byteorder when completing expression
2025-01-22  Pablo Neira... netlink_delinerize: incorrect byteorder in mark stateme...
2025-01-22  Pablo Neira... evaluate: honor statement length in bitwise evaluation
2025-01-22  Pablo Neira... evaluate: set up integer type to shift expression
2025-01-22  Pablo Neira... evaluate: relax type-checking for integer arguments...
2025-01-22  Jeremy Sowdenevaluate: don't eval unary arguments
2025-01-22  Pablo Neira... evaluate: support shifts larger than the width of the...
2025-01-22  Florian Westphalmeta: don't crash if meta key isn't known
2025-01-22  Jeremy Sowdennetlink_delinearize: add postprocessing for payload...
2023-12-12  Pablo Neira... tests: shell: use /bin/bash in sets/elem_opts_compat_0
2023-12-12  Florian Westphalparser_bison: fix memleak in meta set error handling
2023-12-12  Florian Westphalparser_bison: fix objref statement corruption
2023-12-12  Florian Westphalevaluate: validate chain max length
2023-12-12  Florian Westphalparser: tcpopt: fix tcp option parsing with NUM + lengt...
2023-12-12  Pablo Neira... evaluate: reject set definition with no key
2023-12-12  Pablo Neira... monitor: add support for concatenated set ranges
2023-12-12  Florian Westphalevaluate: fix double free on dtype release
2023-12-12  Florian Westphalevaluate: catch implicit map expressions without known...
2023-12-12  Florian Westphalevaluate: reject attempt to update a set
2023-12-05  Florian Westphalevaluate: error out if basetypes are different
2023-12-05  Florian Westphalevaluate: guard against NULL basetype
2023-12-05  Pablo Neira... evaluate: handle invalid mapping expressions gracefully
2023-11-27  Pablo Neira... json: deal appropriately with multidevice in chain
2023-11-27  Pablo Neira... evaluate: clone unary expression datatype to deal with...
2023-11-21  Florian Westphalevaluate: fix rule replacement with anon sets
2023-11-21  Thomas Hallerjson: fix use after free in table_flags_json()
2023-11-21  Pablo Neira... src: expand create commands
2023-11-21  Thomas Hallernetlink: fix buffer size for user data in netlink_delin...
2023-11-21  Florian Westphalmeta: fix hour decoding when timezone offset is negative
2023-11-21  Phil Suttertproxy: Drop artificial port printing restriction
2023-11-21  Thomas Hallerparser_bison: fix length check for ifname in ifname_exp...
2023-11-03  Phil Sutterparser_bison: Fix for broken compatibility with older...
2023-11-03  Pablo Neira... evaluate: validate maximum log statement prefix length
2023-11-03  Florian Westphaltests: never merge across non-expression statements...
2023-11-03  Florian Westphalrule: never merge across non-expression statements
2023-11-03  Pablo Neira... json: add missing map statement stub
2023-11-03  Pablo Neira... netlink_linearize: skip set element expression in map...
2023-11-03  Pablo Neira... json: expose dynamic flag
2023-11-03  Pablo Neira... tests: py: add map support
2023-11-03  Florian Westphaltests: never merge across non-expression statements...
2023-11-03  Phil Sutterparser_json: Default meter size to zero
2023-11-03  Thomas Hallernetlink: handle invalid etype in set_make_key()
2023-11-03  Pablo Neira... datatype: initialize TYPE_CT_EVENTBIT slot in datatype...
2023-11-03  Pablo Neira... datatype: initialize TYPE_CT_LABEL slot in datatype...
2023-11-03  Phil Sutterparser_json: Catch nonsense ops in match statement
2023-11-03  Phil Sutterparser_json: Wrong check in json_parse_ct_timeout_policy()
2023-11-03  Phil Sutterparser_json: Fix synproxy object mss/wscale parsing
2023-11-03  Phil Sutterparser_json: Fix limit object burst value parsing
2023-11-03  Phil Sutterparser_json: Fix flowtable prio value parsing
2023-11-03  Phil Sutterparser_json: Proper ct expectation attribute parsing
2023-11-03  Phil Sutterparser_json: Fix typo in json_parse_cmd_add_object()
2023-11-03  Phil Sutterparser_json: Catch wrong "reset" payload
2023-11-03  Pablo Neira... limit: display default burst when listing ruleset
2023-11-03  Pablo Neira... evaluate: expand sets and maps before evaluation
2023-11-03  Florian Westphalscanner: restrict include directive to regular files
2023-11-03  Florian Westphallibnftables: refuse to open onput files other than...
2023-11-03  Thomas Hallerdatatype: fix leak and cleanup reference counting for...
2023-11-03  Florian Westphalevaluate: fix get element for concatenated set
2023-11-03  Pablo Neira... evaluate: revisit anonymous set with single element...
2023-11-03  Thomas Hallerinclude: drop "format" attribute from nft_gmp_print()
2023-11-03  Thomas Hallerevaluate: fix check for truncation in stmt_evaluate_log...
2023-11-03  Phil Suttertests: monitor: Fix for wrong ordering in expected...
2023-11-03  Phil Suttertests: monitor: Fix for wrong syntax in set-interval.t
2023-11-03  Phil Suttertests: monitor: Fix time format in ct timeout test
2023-11-02  Phil Suttertests: monitor: Fix monitor JSON output for insert...
2023-11-02  Pablo Neira... evaluate: do not remove anonymous set with protocol...
2023-11-02  Phil Sutterevaluate: Drop dead code from expr_evaluate_mapping()
2023-11-02  Phil Suttertests: shell: Stabilize sets/0043concatenated_ranges_0...
2023-11-02  Florian Westphalparser: permit gc-interval in map declarations
2023-11-02  Florian Westphalparser: allow ct timeouts to use time_spec values
2023-11-02  Florian Westphaltests: fix inet nat prio tests
2023-11-02  Pablo Neira... libnftables: Drop cache in -c/--check mode
2023-11-02  Florian Westphalnetlink: delinearize: copy set keytype if needed
2023-11-02  Pablo Neira... expression: define .clone for catchall set element
2023-11-02  Florian Westphalparser: reject zero-length interface names in flowtables
next