search for: set_elems

...tover perror() calls src: simplify unsetters src: check for flags before releasing attributes tests: shuffle values that are injected chain: dynamically allocate name tests: stricter string attribute validation set_elem: fix return in several error paths of nftnl_set_elems_parse2() expr: lookup: print flags only if they are available src: don't set data_len to zero when returning pointers Revert "common: Avoid integer overflow in nftnl_batch_is_supported()" expr: add quota expression expr: numgen: use switch to handle numge...

Hi! The Netfilter project proudly presents: libnftnl 1.0.4 libnftnl is a userspace library providing a low-level netlink programming interface (API) to the in-kernel nf_tables subsystem. The library libnftnl has been previously known as libnftables. This library is currently used by the nft command line tool. This release comes with new features available up to 4.2, see ChangeLog for

Hi! The Netfilter project proudly presents: libnftnl 1.1.6 libnftnl is a userspace library providing a low-level netlink programming interface (API) to the in-kernel nf_tables subsystem. This library is currently used by nftables. See ChangeLog that comes attached to this email for more details. You can download it from: http://www.netfilter.org/projects/libnftnl/downloads.html

Hi! The Netfilter project proudly presents: libnftnl 1.1.4 libnftnl is a userspace library providing a low-level netlink programming interface (API) to the in-kernel nf_tables subsystem. The library libnftnl has been previously known as libnftables. This library is currently used by nftables. See ChangeLog that comes attached to this email for more details. You can download it from:

Hi! The Netfilter project proudly presents: libnftnl 1.0.6 libnftnl is a userspace library providing a low-level netlink programming interface (API) to the in-kernel nf_tables subsystem. The library libnftnl has been previously known as libnftables. This library is currently used by the nft command line tool. This release includes the following list of updates: * New TLV

...;nla_type = NLA_F_NESTED | type; (gdb) bt #0 mnl_attr_nest_start (nlh=nlh at entry=0x7fffffffd150, type=type at entry=1) at attr.c:535 #1 0x00007ffff7712f6d in nft_set_elem_nlmsg_build_payload (nlh=nlh at entry=0x7fffffffd150, e=e at entry=0x6e50c0) at set_elem.c:175 #2 0x00007ffff7713046 in nft_set_elems_nlmsg_build_payload (nlh=nlh at entry=0x7fffffffd150, s=s at entry=0x6deef0) at set_elem.c:218 #3 0x00000000004194ee in mnl_nft_setelem_add (nf_sock=0x645340, nls=0x6deef0, flags=<optimized out>) at src/mnl.c:821 #4 0x0001000a80010010 in ?? () #5 0x00009472cc431100 in ?? () #6 0x800100108...

...set-elem: fix a memory leak lookup: Fix an invalid read Arturo Borrero (8): src: update meta expr examples: nft-set-get: retrieve all sets via unspec examples: add nft-ruleset-get include: add stdint.h to common.h src: check if netlink parsing fails set_elems: delete unexisting exported symbol set_elem: parse family from Netlink message examples: complete nft-events example Arturo Borrero Gonzalez (1): tests: add table 'use' attr to testfiles Eric Leblond (2): expr: add support for nfnetlink queue test: add tests...

...ion examples: nft-rule-parse-add: fix wrong buffer usage when building rule header Giuseppe Longo (1): buffer: include stdarg header Pablo Neira Ayuso (16): expr: log: add support for level and flags src: stricter netlink attribute length validation set_elem: add nft_set_elems_nlmsg_build_payload_iter() common: add batching interfaces examples: nft-chain-add: add chain_add_parse() examples: nft-chain-add: support new batching interface utils: define xfree() as macro src: get rid of cached copies of x_tables.h and xt_LOG.h src: add rule...

Hi! The Netfilter project proudly presents: libnftnl 1.2.7 libnftnl is a userspace library providing a low-level netlink programming interface (API) to the in-kernel nf_tables subsystem. This library is currently used by nftables. This release contains fixes only: * Avoid potential use-after-free when clearing set's expression list * Avoid misc buffer overflows in attribute

...f() data_reg: Add a missing break in nftnl_data_reg_snprintf gen: Remove a pointless call to mnl_nlmsg_get_payload() object: Avoid returning garbage in nftnl_obj_do_parse() ruleset: Avoid reading garbage in nftnl_ruleset_cb() set_elem: Don't return garbage in nftnl_set_elems_parse() trace: Check return value of mnl_attr_parse_nested()

Hi! The Netfilter project proudly presents: libnftnl 1.1.3 libnftnl is a userspace library providing a low-level netlink programming interface (API) to the in-kernel nf_tables subsystem. The library libnftnl has been previously known as libnftables. This library is currently used by nftables. See ChangeLog that comes attached to this email for more details. You can download it from:

Hi! The Netfilter project proudly presents: nftables 0.5 This release contains bug fixes and new features contained up to the 4.2 kernel release. New features ============ * Concatenations: You can combine two or more selectors to build a tuple, then use it to look up for a matching in sets, eg. % nft add rule ip filter input ip saddr . tcp dport { \ 1.1.1.1 . 22 , \

Hi! The Netfilter project proudly presents: nftables 0.6 This release contains many accumulated bug fixes and new features availale up to the Linux 4.7-rc1 kernel release. New features ============ * Rule replacement: You can replace any rule from the unique 64-bits handle. You have to retrieve the handle from the ruleset listing. # nft list ruleset -a table ip filter { chain