]> git.ipfire.org Git - thirdparty/nftables.git/shortlog
thirdparty/nftables.git
2025-07-31  Pablo Neira... Revert "json: Print single set flag as non-array"
2025-07-29  Pablo Neira... Backport nftables tests/shell from 2a38f458f12b
2025-07-29  Florian Westphalevalute: make vlan pcp updates work
2025-07-29  Florian Westphalevaluate: only allow stateful statements in set and...
2025-07-29  Florian Westphalevaluate: compact STMT_F_STATEFUL checks
2025-07-29  Florian Westphalparser_json: only allow concatenations with 2 or more...
2025-07-29  Florian Westphalevaluate: fix crash when generating reject statement...
2025-07-29  Pablo Neira... json: disallow empty concatenation
2025-07-29  Florian Westphalexpression: don't try to import empty string
2025-07-29  Florian Westphaljson: fix error propagation when parsing binop lhs/rhs
2025-07-29  Florian Westphaljson: work around fuzzer-induced assert crashes
2025-07-27  Florian Westphalmeta: fix tc classid parsing out-of-bounds access
2025-07-27  Florian Westphalevaluate: don't update cache for anonymous chains
2025-07-27  Florian Westphalevaluate: reject sets with no key
2025-07-27  Florian Westphalevaluate: fix assertion failure with malformed map...
2025-07-27  Florian Westphalrule: return error if table does not exist
2025-07-27  Pablo Neira... parser_bison: add selector_expr rule to restrict typeof...
2025-07-27  Florian Westphalparser_bison: reject non-serializeable typeof expressions
2025-07-27  Florian Westphalevaluate: move interval flag compat check after set...
2025-07-27  Florian Westphalevaluate: don't allow merging interval set/map with...
2025-07-27  Florian Westphalsrc: do not allow to chain more than 16 binops
2025-07-27  Florian Westphalparser_bison: ensure all timeout policy names are released
2025-07-27  Florian Westphaljson: make sure timeout list is initialised
2025-07-27  Florian Westphalnetlink: fix stack buffer overrun when emitting ranged...
2025-07-27  Florian Westphalevaluate: don't allow nat map with specified protocol
2025-07-27  Florian Westphaltests: shell: move flowtable with bogus priority to...
2025-06-18  Phil Sutternetlink: Avoid crash upon missing NFTNL_OBJ_CT_TIMEOUT_...
2025-06-18  Phil Sutternetlink: Fix for potential crash parsing a flowtable
2025-06-18  Phil Sutternetlink: Do not allocate a bogus flowtable priority...
2025-06-18  Florian Westphaljson: prevent null deref if chain->policy is not set
2025-06-18  Pablo Neira... optimize: invalidate merge in case of duplicated key...
2025-06-18  Pablo Neira... optimize: expand expression list when merging into...
2025-06-18  Pablo Neira... optimize: compact bitmask matching in set/map
2025-06-18  Pablo Neira... optimize: incorrect comparison for reject statement
2025-06-18  Florian Westphalexpression: tolerate named set protocol dependency
2025-06-18  Pablo Neira... netlink: bogus concatenated set ranges with netlink...
2025-06-18  Pablo Neira... segtree: incomplete output in get element command with...
2025-06-18  Florian Westphalsegtree: fix string data initialisation
2025-06-18  Pablo Neira... evaluate: release existing datatype when evaluating...
2025-06-17  Florian Westphalpayload: return early if dependency is not a payload...
2025-06-17  Pablo Neira... evaluate: optimize zero length range
2025-06-17  Xiao Liangfib: Change data type of fib oifname to "ifname"
2025-06-17  Pablo Neira... evaluate: auto-merge is only available for singleton...
2025-06-17  Pablo Neira... parser_bison: turn redundant ip option type field match...
2025-06-17  Pablo Neira... ipopt: use ipv4 address datatype for address field...
2025-06-17  Pablo Neira... datatype: clamp boolean value to 0 and 1
2025-06-17  Pablo Neira... exthdr: incomplete type 2 routing header definition
2025-06-17  Florian Westphalsrc: add and use payload_expr_trim_force
2025-06-17  Florian Westphalnetlink_delinarize: fix bogus munging of mask value
2025-06-17  Pablo Neira... scanner: better error reporting for CRLF line terminators
2025-06-17  Florian Westphalrule: make cmd_free(NULL) valid
2025-06-17  Pablo Neira... intervals: set internal element location with the delet...
2025-01-23  Pablo Neira... evaluate: reset statement length context before evaluat...
2025-01-23  Pablo Neira... optimize: compare expression length
2025-01-23  Florian Westphalsrc: allow to map key to nfqueue number
2025-01-23  Eric Longlibnftables-json: fix raw payload expression documentation
2025-01-23  Phil Sutterjson: Support typeof in set and map types
2025-01-23  Pablo Neira... cache: initialize filter when fetching implicit chains
2025-01-23  Pablo Neira... proto: use NFT_PAYLOAD_L4CSUM_PSEUDOHDR flag to mangle...
2025-01-23  Phil Sutterlibnftables: Zero ctx->vars after freeing it
2025-01-23  Pablo Neira... cache: position does not require full cache
2025-01-23  Pablo Neira... cache: relax requirement for replace rule command
2025-01-23  Pablo Neira... cache: remove full cache requirement when echo flag...
2025-01-23  Pablo Neira... cache: clean up evaluate_cache_del()
2025-01-23  Pablo Neira... cache: assert filter when calling nft_cache_evaluate()
2025-01-23  Pablo Neira... cache: only dump rules for the given table
2025-01-23  Pablo Neira... cache: accumulate flags in batch
2025-01-23  Pablo Neira... cache: reset filter for each command
2025-01-23  Sebastian Walz... parser_json: fix crash in json_parse_set_stmt_list
2025-01-23  Pablo Neira... parser_json: fix handle memleak from error path
2025-01-23  Sebastian Walz... parser_json: fix several expression memleaks from error...
2025-01-23  Sebastian Walz... parser_json: release buffer returned by json_dumps
2025-01-23  谢致邦 (XIE Zhibang)doc: update outdated route and pkttype info
2025-01-23  Pablo Neira... parser_bison: allow 0 burst in limit rate byte mode
2025-01-23  Pablo Neira... cache: do not fetch set inconditionally on delete
2025-01-23  Pablo Neira... cache: populate flowtables on demand from error path
2025-01-23  Pablo Neira... cache: populate objects on demand from error path
2025-01-23  Pablo Neira... cache: populate chains on demand from error path
2025-01-23  Pablo Neira... cmd: provide better hint if chain is already declared...
2025-01-23  Pablo Neira... meta: stash context statement length when generating...
2025-01-23  Pablo Neira... netlink_linearize: use div_round_up in byteorder length
2025-01-23  Pablo Neira... evaluate: honor statement length in integer evaluation
2025-01-23  Pablo Neira... src: improve error reporting for unsupported chain...
2025-01-23  Pablo Neira... cache: rule by index requires full cache
2025-01-23  Pablo Neira... datatype: improve error reporting when time unit is...
2025-01-23  Pablo Neira... datatype: reject rate in quota statement
2025-01-23  Pablo Neira... optimize: skip variables in nat statements
2025-01-23  Pablo Neira... libnftables: skip useable checks for /dev/stdin
2025-01-23  Pablo Neira... parser_json: use stdin buffer if available
2025-01-23  Pablo Neira... optimize: clone counter before insertion into set element
2025-01-23  Pablo Neira... parser_bison: recursive table declaration in deprecated...
2025-01-23  Pablo Neira... intervals: fix element deletions with maps
2025-01-23  Pablo Neira... segtree: set on EXPR_F_KERNEL flag for catchall element...
2025-01-23  Pablo Neira... evaluate: set on expr->len for catchall set elements
2025-01-23  Son Dinhdynset: avoid errouneous assert with ipv6 concat data
2025-01-23  Florian Westphalrule: do not crash if to-be-printed flowtable lacks...
2025-01-23  Pablo Neira... cmd: skip variable set elements when collapsing commands
2025-01-23  Pablo Neira... monitor: too large shift exponent displaying payload...
2025-01-23  Pablo Neira... scanner: inet_pton() allows for broader IPv4-Mapped...
2025-01-23  Pablo Neira... cache: check for NFT_CACHE_REFRESH in current requested...
next