summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Expand)AuthorAgeFilesLines
* netlink: bogus concatenated set ranges with netlink message overrunPablo Neira Ayuso11 days1-5/+14
* evalute: make vlan pcp updates workFlorian Westphal11 days1-4/+38
* Revert "intervals: do not merge intervals with different timeout"Pablo Neira Ayuso2025-04-171-5/+1
* parser_bison: add selector_expr rule to restrict typeof_exprPablo Neira Ayuso2025-04-111-17/+26
* optimize: invalidate merge in case of duplicated key in set/mapPablo Neira Ayuso2025-04-091-1/+39
* evaluate: bail out if ct saddr/daddr dependency cannot be insertedFlorian Westphal2025-04-071-1/+2
* parser_json: only allow concatenations with 2 or more expressionsFlorian Westphal2025-04-022-9/+15
* evaluate: fix crash when generating reject statement errorFlorian Westphal2025-04-021-2/+14
* evaluate: reject: remove unused expr function argumentFlorian Westphal2025-04-021-16/+10
* optimize: expand expression list when merging into concatenationPablo Neira Ayuso2025-04-011-0/+10
* cache: prevent possible crash rule filter is NULLPablo Neira Ayuso2025-04-011-2/+4
* parser_json: bail out on malformed statement in setPablo Neira Ayuso2025-04-011-12/+27
* parser_json: allow statement stateful statement only in set elementsPablo Neira Ayuso2025-04-011-0/+5
* parser_json: reject empty jump/goto chainPablo Neira Ayuso2025-04-011-3/+7
* cache: don't crash when filter is NULLFlorian Westphal2025-04-011-2/+4
* expression: incorrect assert() list_expr_to_binopPablo Neira Ayuso2025-04-011-1/+1
* evaluate: only allow stateful statements in set and map definitionsFlorian Westphal2025-03-311-1/+4
* evaluate: compact STMT_F_STATEFUL checksFlorian Westphal2025-03-311-12/+14
* expression: don't try to import empty stringFlorian Westphal2025-03-311-1/+1
* expression: initialize list of expression to silence gcc compile warningPablo Neira Ayuso2025-03-311-1/+6
* json: fix error propagation when parsing binop lhs/rhsFlorian Westphal2025-03-311-0/+14
* json: don't BUG when asked to list synproxiesFlorian Westphal2025-03-273-6/+38
* json: disallow empty concatenationPablo Neira Ayuso2025-03-271-0/+7
* src: remove flagcmp expressionPablo Neira Ayuso2025-03-273-91/+0
* src: transform flag match expression to binop expression from parserPablo Neira Ayuso2025-03-272-4/+41
* optimize: compact bitmask matching in set/mapPablo Neira Ayuso2025-03-271-1/+34
* optimize: incorrect comparison for reject statementPablo Neira Ayuso2025-03-271-1/+1
* expression: add __EXPR_MAX and use it to define EXPR_MAXPablo Neira Ayuso2025-03-271-0/+1
* json: return error if table does not existFlorian Westphal2025-03-271-1/+6
* evaluate: don't update cache for anonymous chainsFlorian Westphal2025-03-221-0/+4
* json: make sure timeout list is initialisedFlorian Westphal2025-03-211-1/+1
* parser_bison: consolidate connlimit grammar rule for set elementsPablo Neira Ayuso2025-03-211-20/+21
* parser_bison: consolidate last grammar rule for set elementsPablo Neira Ayuso2025-03-211-21/+18
* parser_bison: consolidate quota grammar rule for set elementsPablo Neira Ayuso2025-03-211-26/+23
* parser_bison: consolidate limit grammar rule for set elementsPablo Neira Ayuso2025-03-211-40/+37
* parser_bison: consolidate counter grammar rule for set elementsPablo Neira Ayuso2025-03-211-10/+1
* evaluate: fix assertion failure with malformed map definitionsFlorian Westphal2025-03-201-1/+4
* rule: return error if table does not existFlorian Westphal2025-03-201-1/+7
* evaluate: don't allow nat map with specified protocolFlorian Westphal2025-03-201-0/+4
* expression: tolerate named set protocol dependencyFlorian Westphal2025-03-201-0/+11
* netlink_delinerize: add more restrictions on meta nfproto removalFlorian Westphal2025-03-202-18/+68
* parser_bison: reject non-serializeable typeof expressionsFlorian Westphal2025-03-201-4/+10
* netlink: fix stack buffer overrun when emitting ranged expressionsFlorian Westphal2025-03-181-15/+35
* src: replace struct stmt_ops by type field in struct stmtPablo Neira Ayuso2025-03-1812-69/+130
* src: print set element with multi-word description in single one linePablo Neira Ayuso2025-03-183-3/+19
* evaluate: move interval flag compat check after set key evaluationFlorian Westphal2025-03-181-3/+3
* evaluate: don't allow merging interval set/map with non-interval oneFlorian Westphal2025-03-131-7/+11
* evaluate: fix expression data corruptionFlorian Westphal2025-03-121-11/+18
* netlink_linearize: reduce register waste with non-constant binop expressionsPablo Neira Ayuso2025-03-101-0/+1
* evaluate: don't crash if range has same start and end intervalFlorian Westphal2025-03-101-0/+5