Library for low-level interaction with nftables Netlink's API over libmnl
7037828457
* Wed May 08 2024 Phil Sutter <psutter@redhat.com> [1.2.6-3.el9]
- tests: Fix objref test case (Phil Sutter) [RHEL-28515]
- expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
- obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
- utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
- obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
- obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
- obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
- obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
- obj: Return value on setters (Phil Sutter) [RHEL-28515]
- object: getters take const struct (Phil Sutter) [RHEL-28515]
- utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
- obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
- obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
- table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
- set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
- obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
- flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
- table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
- chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
- expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
- expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
- include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
- expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
- expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
- udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
- obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
- set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
- set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
- expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]
Resolves: RHEL-28515
|
||
|---|---|---|
| .gitignore | ||
| 0001-set-Do-not-leave-free-d-expr_list-elements-in-place.patch | ||
| 0002-expr-fix-buffer-overflows-in-data-value-setters.patch | ||
| 0003-set-buffer-overflow-in-NFTNL_SET_DESC_CONCAT-setter.patch | ||
| 0004-set_elem-use-nftnl_data_cpy-in-NFTNL_SET_ELEM_-KEY-K.patch | ||
| 0005-obj-ct_timeout-setter-checks-for-timeout-array-bound.patch | ||
| 0006-udata-incorrect-userdata-buffer-size-validation.patch | ||
| 0007-expr-Repurpose-struct-expr_ops-max_attr-field.patch | ||
| 0008-expr-Call-expr_ops-set-with-legal-types-only.patch | ||
| 0009-include-Sync-nf_log.h-with-kernel-headers.patch | ||
| 0010-expr-Introduce-struct-expr_ops-attr_policy.patch | ||
| 0011-expr-Enforce-attr_policy-compliance-in-nftnl_expr_se.patch | ||
| 0012-chain-Validate-NFTNL_CHAIN_USE-too.patch | ||
| 0013-table-Validate-NFTNL_TABLE_USE-too.patch | ||
| 0014-flowtable-Validate-NFTNL_FLOWTABLE_SIZE-too.patch | ||
| 0015-obj-Validate-NFTNL_OBJ_TYPE-too.patch | ||
| 0016-set-Validate-NFTNL_SET_ID-too.patch | ||
| 0017-table-Validate-NFTNL_TABLE_OWNER-too.patch | ||
| 0018-obj-Do-not-call-nftnl_obj_set_data-with-zero-data_le.patch | ||
| 0019-obj-synproxy-Use-memcpy-to-handle-potentially-unalig.patch | ||
| 0020-utils-Fix-for-wrong-variable-use-in-nftnl_assert_val.patch | ||
| 0021-object-getters-take-const-struct.patch | ||
| 0022-obj-Return-value-on-setters.patch | ||
| 0023-obj-Repurpose-struct-obj_ops-max_attr-field.patch | ||
| 0024-obj-Call-obj_ops-set-with-legal-attributes-only.patch | ||
| 0025-obj-Introduce-struct-obj_ops-attr_policy.patch | ||
| 0026-obj-Enforce-attr_policy-compliance-in-nftnl_obj_set_.patch | ||
| 0027-utils-Introduce-and-use-nftnl_set_str_attr.patch | ||
| 0028-obj-Respect-data_len-when-setting-attributes.patch | ||
| 0029-expr-Respect-data_len-when-setting-attributes.patch | ||
| 0030-tests-Fix-objref-test-case.patch | ||
| gating.yaml | ||
| libnftnl.spec | ||
| sources | ||