]> git.ipfire.org Git - thirdparty/nftables.git/shortlog
thirdparty/nftables.git
2025-07-27  Florian Westphalevaluate: don't allow nat map with specified protocol
2025-07-27  Florian Westphaltests: shell: move flowtable with bogus priority to...
2025-06-18  Phil Sutternetlink: Avoid crash upon missing NFTNL_OBJ_CT_TIMEOUT_...
2025-06-18  Phil Sutternetlink: Fix for potential crash parsing a flowtable
2025-06-18  Phil Sutternetlink: Do not allocate a bogus flowtable priority...
2025-06-18  Florian Westphaljson: prevent null deref if chain->policy is not set
2025-06-18  Pablo Neira... optimize: invalidate merge in case of duplicated key...
2025-06-18  Pablo Neira... optimize: expand expression list when merging into...
2025-06-18  Pablo Neira... optimize: compact bitmask matching in set/map
2025-06-18  Pablo Neira... optimize: incorrect comparison for reject statement
2025-06-18  Florian Westphalexpression: tolerate named set protocol dependency
2025-06-18  Pablo Neira... netlink: bogus concatenated set ranges with netlink...
2025-06-18  Pablo Neira... segtree: incomplete output in get element command with...
2025-06-18  Florian Westphalsegtree: fix string data initialisation
2025-06-18  Pablo Neira... evaluate: release existing datatype when evaluating...
2025-06-17  Florian Westphalpayload: return early if dependency is not a payload...
2025-06-17  Pablo Neira... evaluate: optimize zero length range
2025-06-17  Xiao Liangfib: Change data type of fib oifname to "ifname"
2025-06-17  Pablo Neira... evaluate: auto-merge is only available for singleton...
2025-06-17  Pablo Neira... parser_bison: turn redundant ip option type field match...
2025-06-17  Pablo Neira... ipopt: use ipv4 address datatype for address field...
2025-06-17  Pablo Neira... datatype: clamp boolean value to 0 and 1
2025-06-17  Pablo Neira... exthdr: incomplete type 2 routing header definition
2025-06-17  Florian Westphalsrc: add and use payload_expr_trim_force
2025-06-17  Florian Westphalnetlink_delinarize: fix bogus munging of mask value
2025-06-17  Pablo Neira... scanner: better error reporting for CRLF line terminators
2025-06-17  Florian Westphalrule: make cmd_free(NULL) valid
2025-06-17  Pablo Neira... intervals: set internal element location with the delet...
2025-01-23  Pablo Neira... evaluate: reset statement length context before evaluat...
2025-01-23  Pablo Neira... optimize: compare expression length
2025-01-23  Florian Westphalsrc: allow to map key to nfqueue number
2025-01-23  Eric Longlibnftables-json: fix raw payload expression documentation
2025-01-23  Phil Sutterjson: Support typeof in set and map types
2025-01-23  Pablo Neira... cache: initialize filter when fetching implicit chains
2025-01-23  Pablo Neira... proto: use NFT_PAYLOAD_L4CSUM_PSEUDOHDR flag to mangle...
2025-01-23  Phil Sutterlibnftables: Zero ctx->vars after freeing it
2025-01-23  Pablo Neira... cache: position does not require full cache
2025-01-23  Pablo Neira... cache: relax requirement for replace rule command
2025-01-23  Pablo Neira... cache: remove full cache requirement when echo flag...
2025-01-23  Pablo Neira... cache: clean up evaluate_cache_del()
2025-01-23  Pablo Neira... cache: assert filter when calling nft_cache_evaluate()
2025-01-23  Pablo Neira... cache: only dump rules for the given table
2025-01-23  Pablo Neira... cache: accumulate flags in batch
2025-01-23  Pablo Neira... cache: reset filter for each command
2025-01-23  Sebastian Walz... parser_json: fix crash in json_parse_set_stmt_list
2025-01-23  Pablo Neira... parser_json: fix handle memleak from error path
2025-01-23  Sebastian Walz... parser_json: fix several expression memleaks from error...
2025-01-23  Sebastian Walz... parser_json: release buffer returned by json_dumps
2025-01-23  谢致邦 (XIE Zhibang)doc: update outdated route and pkttype info
2025-01-23  Pablo Neira... parser_bison: allow 0 burst in limit rate byte mode
2025-01-23  Pablo Neira... cache: do not fetch set inconditionally on delete
2025-01-23  Pablo Neira... cache: populate flowtables on demand from error path
2025-01-23  Pablo Neira... cache: populate objects on demand from error path
2025-01-23  Pablo Neira... cache: populate chains on demand from error path
2025-01-23  Pablo Neira... cmd: provide better hint if chain is already declared...
2025-01-23  Pablo Neira... meta: stash context statement length when generating...
2025-01-23  Pablo Neira... netlink_linearize: use div_round_up in byteorder length
2025-01-23  Pablo Neira... evaluate: honor statement length in integer evaluation
2025-01-23  Pablo Neira... src: improve error reporting for unsupported chain...
2025-01-23  Pablo Neira... cache: rule by index requires full cache
2025-01-23  Pablo Neira... datatype: improve error reporting when time unit is...
2025-01-23  Pablo Neira... datatype: reject rate in quota statement
2025-01-23  Pablo Neira... optimize: skip variables in nat statements
2025-01-23  Pablo Neira... libnftables: skip useable checks for /dev/stdin
2025-01-23  Pablo Neira... parser_json: use stdin buffer if available
2025-01-23  Pablo Neira... optimize: clone counter before insertion into set element
2025-01-23  Pablo Neira... parser_bison: recursive table declaration in deprecated...
2025-01-23  Pablo Neira... intervals: fix element deletions with maps
2025-01-23  Pablo Neira... segtree: set on EXPR_F_KERNEL flag for catchall element...
2025-01-23  Pablo Neira... evaluate: set on expr->len for catchall set elements
2025-01-23  Son Dinhdynset: avoid errouneous assert with ipv6 concat data
2025-01-23  Florian Westphalrule: do not crash if to-be-printed flowtable lacks...
2025-01-23  Pablo Neira... cmd: skip variable set elements when collapsing commands
2025-01-23  Pablo Neira... monitor: too large shift exponent displaying payload...
2025-01-23  Pablo Neira... scanner: inet_pton() allows for broader IPv4-Mapped...
2025-01-23  Pablo Neira... cache: check for NFT_CACHE_REFRESH in current requested...
2025-01-23  Maks Mishinevaluate: Fix incorrect checking the `base` variable...
2025-01-23  Pablo Neira... evaluate: bogus protocol conflicts in vlan with implici...
2025-01-23  Jeremy Sowdenevaluate: add support for variables in map expressions
2025-01-23  Jeremy Sowdenevaluate: handle invalid mapping expressions in statefu...
2025-01-23  Phil Sutterdoc: nft.8: Highlight "hook" in flowtable description
2025-01-23  Phil Sutterdoc: nft.8: Fix markup in ct expectation synopsis
2025-01-23  Phil Sutterjson: Fix for memleak in __binop_expr_json
2025-01-23  Phil Suttermergesort: Avoid accidental set element reordering
2025-01-23  Phil Sutterjson: Accept more than two operands in binary expressions
2025-01-23  Pablo Neira... src: disentangle ICMP code types
2025-01-23  Pablo Neira... netlink_delinearize: unused code in reverse cross-day...
2025-01-23  Pablo Neira... datatype: use DTYPE_F_PREFIX only for IP address datatype
2025-01-23  Pablo Neira... evaluate: display "Range negative size" error
2025-01-23  Pablo Neira... netlink_delinearize: reverse cross-day meta hour range
2025-01-23  Pablo Neira... netlink_delinearize: restore binop syntax when listing...
2025-01-23  Florian Westphalsrc: do not merge a set with a erroneous one
2025-01-23  Phil Sutterparser: json: Support for synproxy objects
2025-01-23  Phil Sutterjson: Support maps with concatenated data
2025-01-23  Phil Sutterjson: Order output like nft_cmd_expand()
2025-01-23  Sriram Rajagopalannftables: do mot merge payloads on negation
2025-01-23  Florian Westphalparser: allow to define maps that contain ct helpers
2025-01-23  Pablo Neira... parser: allow to define maps that contain timeouts...
2025-01-23  Pablo Neira... rule: fix ASAN errors in chain priority to textual...
2025-01-23  Pablo Neira... proto: use hexadecimal to display ip frag-off field
next