search for: set_elem

...ters and parsers expr: data_reg: get rid of leftover perror() calls src: simplify unsetters src: check for flags before releasing attributes tests: shuffle values that are injected chain: dynamically allocate name tests: stricter string attribute validation set_elem: fix return in several error paths of nftnl_set_elems_parse2() expr: lookup: print flags only if they are available src: don't set data_len to zero when returning pointers Revert "common: Avoid integer overflow in nftnl_batch_is_supported()" expr: add quota exp...

...src: rename NFTNL_RULE_EXPR_ATTR to NFTNL_EXPR_ src: get rid of _ATTR_ infix in new nfntl_ definitions src: get rid of _attr_ infix in new nftnl_ definitions bump version to 1.0.4 Patrick McHardy (11): list: fix prefetch dummy set: add support for set timeouts set_elem: add timeout support set: print set elem timeout information set_elem: add support for userdata expr: add support for the dynset expr headers: resync headers for new register definitions data: increase maximum possible data size expr: seperate expression parsing...

...support for passing mask and xor via registers. Pablo Neira Ayuso (12): include: typo in object.h C++ wrapper udata: add NFTNL_UDATA_SET_*TYPEOF* definitions udata: support for TLV attribute nesting src: add nftnl_*_{get,set}_array() chain: add NFTNL_CHAIN_FLAGS set_elem: missing set and build for NFTNL_SET_ELEM_EXPR set: support for NFTNL_SET_EXPR expr: masq: revisit _snprintf() expr: nat: snprint flags in hexadecimal Revert "bitwise: add support for passing mask and xor via registers." include: update nf_tables.h. bui...

Hi! The Netfilter project proudly presents: libnftnl 1.1.4 libnftnl is a userspace library providing a low-level netlink programming interface (API) to the in-kernel nf_tables subsystem. The library libnftnl has been previously known as libnftables. This library is currently used by nftables. See ChangeLog that comes attached to this email for more details. You can download it from:

...tructure tests: nft-rule-test: check for NFTNL_RULE_USERDATA libnftnl: Add to .gitignore all auto-generated files libnftnl: gitignore: Fix mistake in gitignore regexp tests: Free nftnl_udata_buf before exit rule: Fix segfault due to invalid free of rule user data set_elem: Fix memory leak set_elem: Copy user data memory Daniel Wagner (1): examples: load modules when adding chains or tables Florian Westphal (4): src: rename EXPORT_SYMBOL to EXPORT_SYMBOL_ALIAS src: add trace infrastructure support src: ct: add packet and byte counter s...

...egmentation fault. mnl_attr_nest_start (nlh=nlh at entry=0x7fffffffd150, type=type at entry=1) at attr.c:535 535 start->nla_type = NLA_F_NESTED | type; (gdb) bt #0 mnl_attr_nest_start (nlh=nlh at entry=0x7fffffffd150, type=type at entry=1) at attr.c:535 #1 0x00007ffff7712f6d in nft_set_elem_nlmsg_build_payload (nlh=nlh at entry=0x7fffffffd150, e=e at entry=0x6e50c0) at set_elem.c:175 #2 0x00007ffff7713046 in nft_set_elems_nlmsg_build_payload (nlh=nlh at entry=0x7fffffffd150, s=s at entry=0x6deef0) at set_elem.c:218 #3 0x00000000004194ee in mnl_nft_setelem_add (nf_sock=0x645340, nls=...

...set-elem: fix a memory leak lookup: Fix an invalid read Arturo Borrero (8): src: update meta expr examples: nft-set-get: retrieve all sets via unspec examples: add nft-ruleset-get include: add stdint.h to common.h src: check if netlink parsing fails set_elems: delete unexisting exported symbol set_elem: parse family from Netlink message examples: complete nft-events example Arturo Borrero Gonzalez (1): tests: add table 'use' attr to testfiles Eric Leblond (2): expr: add support for nfnetlink queue test: add tests...

...group support expr: meta: Add cgroup support Arturo Borrero (33): set: add support for set mechanism selection examples: nft-set-add: use batch infraestructure examples: nft-chain-del: add chain_del_parse() examples: nft-chain-del: support new batching interface set_elem: use proper free function examples: merge nft-chain-{xml|json}-add.c examples: nft-chain-parse-add: add batching support examples: merge nft-table-{xml|json}-add.c examples: nft-table-parse-add: add batching support examples: nft-table-add: add table_add_parse()...

...ewalling. -------------- next part -------------- Florian Westphal (1): expr: fix buffer overflows in data value setters Nicholas Vinson (1): chain: Removed non-defined functions Pablo Neira Ayuso (7): object: define nftnl_obj_unset() set: buffer overflow in NFTNL_SET_DESC_CONCAT setter set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} obj: ct_timeout: setter checks for timeout array boundaries expr: immediate: check for chain attribute to release chain name udata: incorrect userdata buffer size validation utils: remove unused code Phil Sutter (24): set: Do not...

...(7): expr: Introduce nftnl_expr_fprintf() data_reg: Add a missing break in nftnl_data_reg_snprintf gen: Remove a pointless call to mnl_nlmsg_get_payload() object: Avoid returning garbage in nftnl_obj_do_parse() ruleset: Avoid reading garbage in nftnl_ruleset_cb() set_elem: Don't return garbage in nftnl_set_elems_parse() trace: Check return value of mnl_attr_parse_nested()

...details. You can download it from: http://www.netfilter.org/projects/libnftnl/downloads.html ftp://ftp.netfilter.org/pub/libnftnl/ Happy firewalling. -------------- next part -------------- Fernando Fernandez Mancera (1): expr: osf: add version option support Florian Westphal (2): set_elem: close a padding hole src: libnftnl: export genid functions again Laura Garcia Liebana (2): Revert "expr: add map lookups for numgen statements" Revert "expr: add map lookups for hash statements" Pablo Neira Ayuso (2): udata: add NFTNL_UDATA_* definitio...

...ta: don't print meta keyword for unqualified meta stmts evaluate: verify named map is actually a map evaluate: properly set datatype of map expression evaluate: check that map expressions' datatype matches mappings evaluate: use stmt_evaluate_arg() in all cases set_elem: convert flag value to inclusive-OR binops during delinearize nft-test: don't use colors if output is not a tty netlink: fix use after free in netlink_get_table() netlink_delinarize: fix payload dependency killing of link layer dependencies parser: remove duplicated gram...

...cuted Arturo Borrero Gonzalez (1): rule: fix printing of rule comments Carlos Falgueras Garc?a (6): src: Add command "replace" for rules rule: Use libnftnl user data TLV infrastructure netlink_linearize: do not duplicate user data when linearizing user data set_elem: Use libnftnl/udata to store set element comment parser: Consolidate comment production parser: cap comment length to 128 bytes Florian Westphal (54): tests: don't depend on set element order nft: allow stacking vlan header on top of ethernet payload: disable payl...