search for: netlink_delinearize

https://bugzilla.netfilter.org/show_bug.cgi?id=1429 Bug ID: 1429 Summary: Empty file in source directory - 'netlink_delinearize.' Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: trivial Priority: P5 Component: nft Assignee: pablo at netfilter.org Reporter: dmitry at netgate.com...

...uid/gid checks tests: validate generated netlink instructions tests: add two test cases using binop w. payload tests: use the src/nft binary instead of $PATH one tests: add 'awkward' prefix match expression src: fix build with debug off Pablo Neira (1): netlink_delinearize: restore listing of host byteorder set elements Pablo Neira Ayuso (67): tests: regression: named sets work tests: regression: revisit chain tests payload: assert when accessing inner transport header evaluate: reject: fix dependency generation from nft -f build: use -...

https://bugzilla.netfilter.org/show_bug.cgi?id=1222 Bug ID: 1222 Summary: nft list ruleset – infinite memory use Product: nftables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: normal Priority: P5 Component: nft Assignee: pablo at netfilter.org

...ct regression tests for bytes, packets tests: ct: remove BUG cases that work with current master doc: update ct expression netlink: move binop postprocess to extra function tests: add two map test cases netlink: do binop postprocessing also for map lookups netlink_delinearize: only remove protocol if equal cmp is used meta: fix error checks in tc handle parser examples: use current type names evaluate: reject set references in set elements evaluate: enforce ip6 proto with exthdr expression netlink: split generic part of netlink_gen_payload_...

..._port with typeof+concat maps Jan Engelhardt (1): src: compute mnemonic port name much easier Jeremy Sowden (28): evaluate: fix expr_set_context call for shift binops. include: nf_tables: correct bitwise header comment. Update gitignore. src: white-space fixes. netlink_delinearize: fix typo. netlink_delinearize: remove commented out pr_debug statement. include: update nf_tables.h. netlink: add support for handling shift expressions. parser: add parenthesized statement expressions. evaluate: correct variable name. evaluate: change shift byt...

..._binary_error()-related compilation warnings ct: add support for setting ct mark Arturo Borrero Gonzalez (2): ruleset: add XML/JSON export expression: fix constant expression allocation on big endian Eric Leblond (1): src: add support for queue Florian Westphal (6): netlink_delinearize: meta: fix wrong type in attributes ct: direction should be integer, not bitmask ct: connlabel matching support datatype: don't leak file ptr on error expr: do not suppress OP_EQ when RHS is bitmask type build: drop AC_FUNC_MALLOC/REALLOC Pablo Neira Ayuso (7):...

...parser: reject raw payload expressions with 0 length evaluate: error out when store needs more than one 128bit register of align fixup rule: fix sym refcount assertion tests: py: remove huge-limit test cases evaluate: don't assert on net/transport header conflict netlink_delinearize: move concat and value postprocessing to helpers tests: shell: permit use of host-endian constant values in set lookup keys tests: shell: add regression test for catchall double-delete tests: py: add missing json.output data tests: shell: add more json dumps parser_jso...

...tests: py: add ct helper tests tests: add insert-failure test doc: ct helper objects and helper set support exthdr: avoid crash with older kernels src: fix build warning on i686 ct: add conntrack event mask support parser: allow listing sets in one table netlink_delinearize: don't kill dependencies accross statements tests: don't kill dependencies accross statements netlink_delink_delinearize: don't store dependency unless relop checks is eq check src: add a comment wrt. reject dependency insertion netlink_delinearize: reject: remov...

...s Harsha Sharma (1): tests: shell: fetch rule handle with '-a' option and then delete rule Pablo M. Bermudo Garay (1): update gitignore Pablo Neira Ayuso (4): Revert ("src: Remove xt_stmt_() functions"). src: add 'auto-merge' option to sets netlink_delinearize: add assertion to prevent infinite loop build: Bump version to v0.8.2 Phil Sutter (4): build: Eliminate forgotten traces of libnftables exporting configure: Fix help text regarding --enable-debug configure: Allow to disable man page building tests/shell: Add back name...

https://bugzilla.netfilter.org/show_bug.cgi?id=935 Summary: Frag: problem with frag-off Product: nftables Version: unspecified Platform: x86_64 OS/Version: Debian GNU/Linux Status: NEW Severity: normal Priority: P5 Component: nft AssignedTo: pablo at netfilter.org ReportedBy: anarey at

https://bugzilla.netfilter.org/show_bug.cgi?id=936 Summary: frag: "more-fragments" and "reserved" are not identified by nftables Product: nftables Version: unspecified Platform: x86_64 OS/Version: Debian GNU/Linux Status: NEW Severity: normal Priority: P5 Component:

...ipv4_addr } chain egress { type filter hook prerouting priority filter - 1; policy accept; iifname != "igb0" ct original daddr @servers } } Next, try to list a table by any given name - even the "metrics" table itself: # nft list table metrics nft: netlink_delinearize.c:124: netlink_parse_concat_expr: Assertion `consumed > 0' failed. Aborted I have noticed that the assertion can be avoided by remove the "ct original daddr @servers" condition from the rule. -- You are receiving this mail because: You are watching all bug changes. -------------...

...'t use -nnn for non-list commands tests: regression: fix bogus error due to bash tests: regression: test masquerade from nat/postrouting too datatype: fix crash when using basetype instead of symbolic constants datatype: relax datatype check in integer_type_parse() netlink_delinearize: clone on netlink_get_register(), release previous on _set() meta: set base field on clones tests: regression: fix "Listing is broken" instead of output mismatch tests: regression: any/ct: remove wrong output scanner: don't bug on too large values payload...

https://bugzilla.netfilter.org/show_bug.cgi?id=1330 Bug ID: 1330 Summary: Parse error for importing set with netmask Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: major Priority: P5 Component: nft Assignee: pablo at netfilter.org

...the evaluation phase src: remove cache lookups after the evaluation phase evaluate: remove table from cache on delete table parser_bison: memleak symbol redefinition evaluate: memleak in invalid default policy definition evaluate: UAF in hook priority expression netlink_delinearize: transform binary operation to prefix only with values evaluate: disregard ct address matching without family segtree: memleaks in interval_map_decompose() src: cache gets out of sync in interactive mode src: add comment support for map too mergesort: unbreak listing w...

...validate maximum hash and numgen value parser_bison: add variable_expr rule parser_bison: allow variable references in set elements definition tests: py: adapt netlink bytecode output of numgen and hash evaluate: display expression, statement and command name on debug netlink_delinearize: Avoid potential null pointer deref doc: nft: add my copyright statement to the manpage doc: nft: document log, reject, counter, meta, limit, nat and queue statements src: use new range expression for != [a,b] intervals parser_bison: allow to use variable to add/create/delet...