Netfilter Tables userspace utillites
92f5b031b7
* Wed Jul 22 2026 Phil Sutter <psutter@redhat.com> [1.0.9-8.el9]
- spec: Update expected test suite results (Phil Sutter) [RHEL-190549]
- tests: monitor: Fix for out-of-path call (Phil Sutter) [RHEL-190549]
- tests: monitor: Excercise all syntaxes and variants by default (Phil Sutter) [RHEL-190549]
- tests: monitor: Test JSON echo mode as well (Phil Sutter) [RHEL-190549]
- tests: monitor: Become $PWD agnostic (Phil Sutter) [RHEL-190549]
- tests: monitor: Run in own netns (Phil Sutter) [RHEL-190549]
- tests: monitor: Label diffs to help users (Phil Sutter) [RHEL-190549]
- tests: monitor: Extend testcases a bit (Phil Sutter) [RHEL-190549]
- tests: monitor: enclose device names in quotes (Phil Sutter) [RHEL-190549]
- json: Dump flowtable hook spec only if present (Phil Sutter) [RHEL-190549]
- tests: py: Fix some JSON equivalents (Phil Sutter) [RHEL-190549]
- rule: constify set_is_non_concat_range() (Phil Sutter) [RHEL-190549]
- datatype: don't return a const string from cgroupv2_get_path() (Phil Sutter) [RHEL-190549]
- tests: py: Fix --keep test runner option (Phil Sutter) [RHEL-190549]
- segtree: fix get element command with open intervals (Phil Sutter) [RHEL-190549]
- segtree: replace default case by specific types in get_set_intervals() (Phil Sutter) [RHEL-190549]
- src: remove EXPR_SET_ELEM in range_expr_value_{low,high}() (Phil Sutter) [RHEL-190549]
- segtree: rename set_elem_add() to set_elem_expr_add() (Phil Sutter) [RHEL-190549]
- parser_json: fix map/set type confusion crash in map statement parser (Phil Sutter) [RHEL-190549]
- cache: honor -c/--check for reset commands (Phil Sutter) [RHEL-190549]
- tests: py: osf is ip-only (Phil Sutter) [RHEL-190549]
- tests: py: print the file name as intended (Phil Sutter) [RHEL-190549]
- tests: py: don't use a fixed filename (Phil Sutter) [RHEL-190549]
- mnl: Fix ordering of hooks in 'list hooks' output (Phil Sutter) [RHEL-190549]
- segtree: Fix for variable-sized object may not be initialized (Phil Sutter) [RHEL-190549]
- cache: Filter for table when listing flowtables (Phil Sutter) [RHEL-190549]
- cache: Filter for table when listing sets or maps (Phil Sutter) [RHEL-190549]
- cache: Respect family in all list commands (Phil Sutter) [RHEL-190549]
- cache: Include chains, flowtables and objects in netlink debug output (Phil Sutter) [RHEL-190549]
- cache: Relax chain_cache_dump filter application (Phil Sutter) [RHEL-190549]
- parser_bison: add range check for synproxy wscale (Phil Sutter) [RHEL-190549]
- json: complete multi-statement set element support (Phil Sutter) [RHEL-190549]
- segtree: Fix range aggregation on Big Endian (Phil Sutter) [RHEL-190549]
- mergesort: Align concatenation sort order with Big Endian (Phil Sutter) [RHEL-190549]
- mergesort: Fix sorting of string values (Phil Sutter) [RHEL-190549]
- tests: py: any/tcpopt.t.json: Fix JSON equivalent (Phil Sutter) [RHEL-190549]
- expression: expr_build_udata_recurse should recurse (Phil Sutter) [RHEL-190549]
- expression: propagate key datatype for anonymous sets (Phil Sutter) [RHEL-190549]
- netlink_delinearize: also consider exthdr type when trimming binops (Phil Sutter) [RHEL-190549]
- tcpopt: add symbol table for mptcp suboptions (Phil Sutter) [RHEL-190549]
- monitor: fix memleak in setelem cb (Phil Sutter) [RHEL-190549]
- tests: json_echo: Drop rule handle before multi-add (Phil Sutter) [RHEL-190549]
- rule: skip CMD_OBJ_SETELEMS with no elements after set flush (Phil Sutter) [RHEL-190549]
- doc: libnftables-json: Describe RULESET object (Phil Sutter) [RHEL-190549]
- doc: don't suggest to disable GSO (Phil Sutter) [RHEL-190549]
- tests: py: Implement payload_record() (Phil Sutter) [RHEL-190549]
- tests: py: inet/osf.t: Fix element ordering in JSON equivalents (Phil Sutter) [RHEL-190549]
- tests: py: Do not rely upon '[end]' marker (Phil Sutter) [RHEL-190549]
- tests: py: Fix for using wrong payload path (Phil Sutter) [RHEL-190549]
- tests: py: any/ct.t.json.output: Drop leftover entry (Phil Sutter) [RHEL-190549]
- datatype: Fix boolean type on Big Endian (Phil Sutter) [RHEL-190549]
- optimize: Fix verdict expression comparison (Phil Sutter) [RHEL-190549]
- src: parser_json: fix format string bugs (Phil Sutter) [RHEL-190549]
- doc: fix tcpdump example (Phil Sutter) [RHEL-190549]
- tests: py: objects.t: must use input, not output (Phil Sutter) [RHEL-190549]
- fib: Fix for existence check on Big Endian (Phil Sutter) [RHEL-190549]
- tests: Prepare exit codes for automake (Phil Sutter) [RHEL-190549]
- monitor: Inform JSON printer when reporting an object delete event (Phil Sutter) [RHEL-190549]
- monitor: Recognize flowtable add/del events (Phil Sutter) [RHEL-190549]
- tests: monitor: Fix regex collecting expected echo output (Phil Sutter) [RHEL-190549]
- monitor: Quote device names in chain declarations, too (Phil Sutter) [RHEL-190549]
- mnl: continue on ENOBUFS errors when processing batch (Phil Sutter) [RHEL-190549]
- tests: monitor: Fix for flag arrays in JSON output (Phil Sutter) [RHEL-190549]
- mnl: silence compiler warning (Phil Sutter) [RHEL-190549]
- fib: restore JSON output for relational expressions (Phil Sutter) [RHEL-190549]
- src: ensure chain policy evaluation when specified (Phil Sutter) [RHEL-190549]
- segtree: incorrect type when aggregating concatenated set ranges (Phil Sutter) [RHEL-190549]
- json: Do not reduce single-item arrays on output (Phil Sutter) [RHEL-190549]
- tests: py: Fix tests added for 'icmpv6 taddr' support (Phil Sutter) [RHEL-190549]
- tests: py: Drop stale entry from ip/snat.t.payload (Phil Sutter) [RHEL-190549]
- tests: py: Drop stale entries from ip6/{ct,meta}.t.json (Phil Sutter) [RHEL-190549]
- tests: py: Drop stale entry from ip/snat.t.json (Phil Sutter) [RHEL-190549]
- tests: py: Drop duplicate test from inet/vxlan.t (Phil Sutter) [RHEL-190549]
- tests: py: Drop stale entry from inet/tcp.t.json (Phil Sutter) [RHEL-190549]
- tests: py: Drop duplicate test from inet/gretap.t (Phil Sutter) [RHEL-190549]
- tests: py: Drop duplicate test from inet/gre.t (Phil Sutter) [RHEL-190549]
- tests: py: Drop duplicate test from inet/geneve.t (Phil Sutter) [RHEL-190549]
- tests: py: Drop stale entries since redundant test case removal (Phil Sutter) [RHEL-190549]
- src: netlink: netlink_delinearize_table() may return NULL (Phil Sutter) [RHEL-190549]
- doc: nft.8: Minor NAT STATEMENTS section review (Phil Sutter) [RHEL-190549]
- mnl: Call mnl_attr_nest_end() just once (Phil Sutter) [RHEL-190549]
- evaluate: validate set expression type before accessing flags (Phil Sutter) [RHEL-190549]
- rule: print chain and flowtable devices in quotes (Phil Sutter) [RHEL-190549]
- tests: py: re-enables nft-test.py to load the local nftables.py (Phil Sutter) [RHEL-190549]
- fib: allow to use it in set statements (Phil Sutter) [RHEL-190549]
- fib: allow to check if route exists in maps (Phil Sutter) [RHEL-190549]
- tests: shell: Fix ifname_based_hooks feature check (Phil Sutter) [RHEL-190549]
- json: reject too long interface names (Phil Sutter) [RHEL-190549]
- tests/py: clean up set backend support fallout (Phil Sutter) [RHEL-190549]
- cache: assert name is non-nul when looking up (Phil Sutter) [RHEL-190549]
- parser_bison: only reset by name is supported by now (Phil Sutter) [RHEL-190549]
- rule: skip fuzzy lookup if object name is not available (Phil Sutter) [RHEL-190549]
- parser_bison: allow delete command with map via handle (Phil Sutter) [RHEL-190549]
- debug: include kernel set information on cache fill (Phil Sutter) [RHEL-190549]
- tests/py: prepare for set debug change (Phil Sutter) [RHEL-190549]
- src: BASECHAIN flag no longer implies presence of priority expression (Phil Sutter) [RHEL-190549]
- netlink: Avoid crash upon missing NFTNL_OBJ_CT_TIMEOUT_ARRAY attribute (Phil Sutter) [RHEL-190549]
- tests: py: Properly fix JSON equivalents for netdev/reject.t (Phil Sutter) [RHEL-190549]
- tests: shell: Adjust to ifname-based hooks (Phil Sutter) [RHEL-190549]
- tests: shell: combine dormant flag with netdevice removal (Phil Sutter) [RHEL-190549]
- tests: monitor: Fix for single flag array avoidance (Phil Sutter) [RHEL-190549]
- netlink: Do not allocate a bogus flowtable priority expr (Phil Sutter) [RHEL-190549]
- netlink: Fix for potential crash parsing a flowtable (Phil Sutter) [RHEL-190549]
- json: work around fuzzer-induced assert crashes (Phil Sutter) [RHEL-190549]
- json: prevent null deref if chain->policy is not set (Phil Sutter) [RHEL-190549]
- tests: py: fix json single-flag output for fib & synproxy (Phil Sutter) [RHEL-190549]
- tests: shell: check for features not available in 5.4 (Phil Sutter) [RHEL-190549]
- netlink: Avoid potential NULL-ptr deref parsing set elem expressions (Phil Sutter) [RHEL-190549]
- netlink: Catch unknown types when deserializing objects (Phil Sutter) [RHEL-190549]
- json: Introduce json_add_array_new() (Phil Sutter) [RHEL-190549]
- json: Fix for memleak in __binop_expr_json (Phil Sutter) [RHEL-190549]
- json: Accept more than two operands in binary expressions (Phil Sutter) [RHEL-190549]
- json: Print single fib flag as non-array (Phil Sutter) [RHEL-190549]
- tests: shell: Add test case for JSON 'flags' arrays (Phil Sutter) [RHEL-190549]
- json: Print single set flag as non-array (Phil Sutter) [RHEL-190549]
- json: Print single synproxy flags as non-array (Phil Sutter) [RHEL-190549]
- parser_json: Introduce parse_flags_array() (Phil Sutter) [RHEL-190549]
- doc: Fix typo in nat statement 'prefix' description (Phil Sutter) [RHEL-190549]
- netlink: bogus concatenated set ranges with netlink message overrun (Phil Sutter) [RHEL-190549]
- parser_bison: add selector_expr rule to restrict typeof_expr (Phil Sutter) [RHEL-190549]
- optimize: invalidate merge in case of duplicated key in set/map (Phil Sutter) [RHEL-190549]
- evaluate: bail out if ct saddr/daddr dependency cannot be inserted (Phil Sutter) [RHEL-190549]
- parser_json: bail out on malformed statement in set (Phil Sutter) [RHEL-190549]
- parser_json: reject empty jump/goto chain (Phil Sutter) [RHEL-190549]
- parser_json: allow statement stateful statement only in set elements (Phil Sutter) [RHEL-190549]
- cache: prevent possible crash rule filter is NULL (Phil Sutter) [RHEL-190549]
- optimize: expand expression list when merging into concatenation (Phil Sutter) [RHEL-190549]
- cache: don't crash when filter is NULL (Phil Sutter) [RHEL-190549]
- evaluate: only allow stateful statements in set and map definitions (Phil Sutter) [RHEL-190549]
- evaluate: compact STMT_F_STATEFUL checks (Phil Sutter) [RHEL-190549]
- json: don't BUG when asked to list synproxies (Phil Sutter) [RHEL-190549]
- optimize: incorrect comparison for reject statement (Phil Sutter) [RHEL-190549]
- optimize: compact bitmask matching in set/map (Phil Sutter) [RHEL-190549]
- tests: shell: missing ct count elements in new set_stmt test (Phil Sutter) [RHEL-190549]
- evaluate: don't update cache for anonymous chains (Phil Sutter) [RHEL-190549]
- json: make sure timeout list is initialised (Phil Sutter) [RHEL-190549]
- parser_bison: consolidate connlimit grammar rule for set elements (Phil Sutter) [RHEL-190549]
- parser_bison: consolidate last grammar rule for set elements (Phil Sutter) [RHEL-190549]
- parser_bison: consolidate quota grammar rule for set elements (Phil Sutter) [RHEL-190549]
- parser_bison: consolidate limit grammar rule for set elements (Phil Sutter) [RHEL-190549]
- parser_bison: consolidate counter grammar rule for set elements (Phil Sutter) [RHEL-190549]
- tests: shell: extend coverage for set element statements (Phil Sutter) [RHEL-190549]
- evaluate: fix assertion failure with malformed map definitions (Phil Sutter) [RHEL-190549]
- evaluate: don't allow nat map with specified protocol (Phil Sutter) [RHEL-190549]
- parser_bison: reject non-serializeable typeof expressions (Phil Sutter) [RHEL-190549]
- netlink: fix stack buffer overrun when emitting ranged expressions (Phil Sutter) [RHEL-190549]
- src: print set element with multi-word description in single one line (Phil Sutter) [RHEL-190549]
- tests: shell: detach synproxy test (Phil Sutter) [RHEL-190549]
- src: do not merge a set with a erroneous one (Phil Sutter) [RHEL-190549]
- segtree: incomplete output in get element command with maps (Phil Sutter) [RHEL-190549]
- evaluate: release existing datatype when evaluating unary expression (Phil Sutter) [RHEL-190549]
- segtree: fix string data initialisation (Phil Sutter) [RHEL-190549]
- payload: honor inner payload description in payload_expr_cmp() (Phil Sutter) [RHEL-190549]
- payload: return early if dependency is not a payload expression (Phil Sutter) [RHEL-190549]
- evaluate: optimize zero length range (Phil Sutter) [RHEL-190549]
- fib: Change data type of fib oifname to "ifname" (Phil Sutter) [RHEL-190549]
- evaluate: auto-merge is only available for singleton interval sets (Phil Sutter) [RHEL-190549]
- parser_bison: compact and simplify list and reset syntax (Phil Sutter) [RHEL-190549]
- parser_bison: turn redundant ip option type field match into boolean (Phil Sutter) [RHEL-190549]
- datatype: clamp boolean value to 0 and 1 (Phil Sutter) [RHEL-190549]
- tests: shell: delete netdev chain after test (Phil Sutter) [RHEL-190549]
- ipopt: use ipv4 address datatype for address field in ip options (Phil Sutter) [RHEL-190549]
- netlink_delinarize: fix bogus munging of mask value (Phil Sutter) [RHEL-190549]
- evaluate: remove variable shadowing (Phil Sutter) [RHEL-190549]
- intervals: do not merge intervals with different timeout (Phil Sutter) [RHEL-190549]
- src: add EXPR_RANGE_VALUE expression and use it (Phil Sutter) [RHEL-190549]
- intervals: add helper function to set previous element (Phil Sutter) [RHEL-190549]
- parser_bison: fix UaF when reporting table parse error (Phil Sutter) [RHEL-190549]
- intervals: set internal element location with the deletion trigger (Phil Sutter) [RHEL-190549]
- optimize: compare expression length (Phil Sutter) [RHEL-190549]
- tests: py: Fix for storing payload into missing file (Phil Sutter) [RHEL-190549]
- json: Support typeof in set and map types (Phil Sutter) [RHEL-190549]
- json: collapse set element commands from parser (Phil Sutter) [RHEL-190549]
- doc: extend description of fib expression (Phil Sutter) [RHEL-190549]
- tests: monitor: fix up test case breakage (Phil Sutter) [RHEL-190549]
- src: fix extended netlink error reporting with large set elements (Phil Sutter) [RHEL-190549]
- mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc() (Phil Sutter) [RHEL-190549]
- mnl: update cmd_add_loc() to take struct nlmsghdr (Phil Sutter) [RHEL-190549]
- rule: netlink attribute offset is uint32_t for struct nlerr_loc (Phil Sutter) [RHEL-190549]
- src: collapse set element commands from parser (Phil Sutter) [RHEL-190549]
- libnftables-json: fix raw payload expression documentation (Phil Sutter) [RHEL-190549]
- cache: initialize filter when fetching implicit chains (Phil Sutter) [RHEL-190549]
- tests: py: fix up udp csum fixup output (Phil Sutter) [RHEL-190549]
- proto: use NFT_PAYLOAD_L4CSUM_PSEUDOHDR flag to mangle UDP checksum (Phil Sutter) [RHEL-190549]
- tests: shell: stabilize packetpath/payload (Phil Sutter) [RHEL-190549]
- libnftables: Zero ctx->vars after freeing it (Phil Sutter) [RHEL-190549]
- cache: position does not require full cache (Phil Sutter) [RHEL-190549]
- cache: relax requirement for replace rule command (Phil Sutter) [RHEL-190549]
- cache: remove full cache requirement when echo flag is set on (Phil Sutter) [RHEL-190549]
- cache: assert filter when calling nft_cache_evaluate() (Phil Sutter) [RHEL-190549]
- cache: consolidate reset command (Phil Sutter) [RHEL-190549]
- cache: add filtering support for objects (Phil Sutter) [RHEL-190549]
- cache: only dump rules for the given table (Phil Sutter) [RHEL-190549]
- cache: accumulate flags in batch (Phil Sutter) [RHEL-190549]
- cache: reset filter for each command (Phil Sutter) [RHEL-190549]
- parser_json: fix several expression memleaks from error path (Phil Sutter) [RHEL-190549]
- parser_json: release buffer returned by json_dumps (Phil Sutter) [RHEL-190549]
- json: Support maps with concatenated data (Phil Sutter) [RHEL-190549]
- parser_json: fix crash in json_parse_set_stmt_list (Phil Sutter) [RHEL-190549]
- parser_bison: allow 0 burst in limit rate byte mode (Phil Sutter) [RHEL-190549]
- datatype: improve error reporting when time unit is not correct (Phil Sutter) [RHEL-190549]
- cache: rule by index requires full cache (Phil Sutter) [RHEL-190549]
- datatype: reject rate in quota statement (Phil Sutter) [RHEL-190549]
- optimize: skip variables in nat statements (Phil Sutter) [RHEL-190549]
- parser_json: use stdin buffer if available (Phil Sutter) [RHEL-190549]
- libnftables: skip useable checks for /dev/stdin (Phil Sutter) [RHEL-190549]
- optimize: clone counter before insertion into set element (Phil Sutter) [RHEL-190549]
- segtree: set on EXPR_F_KERNEL flag for catchall elements in the cache (Phil Sutter) [RHEL-190549]
- evaluate: set on expr->len for catchall set elements (Phil Sutter) [RHEL-190549]
- parser_bison: recursive table declaration in deprecated meter statement (Phil Sutter) [RHEL-190549]
- intervals: fix element deletions with maps (Phil Sutter) [RHEL-190549]
- src: add string preprocessor and use it for log prefix string (Phil Sutter) [RHEL-190549]
- tests: shell: skip ip option tests if kernel does not support it (Phil Sutter) [RHEL-190549]
- cmd: skip variable set elements when collapsing commands (Phil Sutter) [RHEL-190549]
- cmd: provide better hint if chain is already declared with different type/hook/priority (Phil Sutter) [RHEL-190549]
- monitor: too large shift exponent displaying payload expression (Phil Sutter) [RHEL-190549]
- scanner: inet_pton() allows for broader IPv4-Mapped IPv6 addresses (Phil Sutter) [RHEL-190549]
- evaluate: Fix incorrect checking the `base` variable in case of IPV6 (Phil Sutter) [RHEL-190549]
- evaluate: bogus protocol conflicts in vlan with implicit dependencies (Phil Sutter) [RHEL-190549]
- cache: check for NFT_CACHE_REFRESH in current requested cache too (Phil Sutter) [RHEL-190549]
- doc: nft.8: Fix markup in ct expectation synopsis (Phil Sutter) [RHEL-190549]
- mergesort: Avoid accidental set element reordering (Phil Sutter) [RHEL-190549]
- doc: nft.8: Two minor synopsis fixups (Phil Sutter) [RHEL-190549]
- tests: shell: check for reset tcp options support (Phil Sutter) [RHEL-190549]
- tests: shell: payload matching requires egress support (Phil Sutter) [RHEL-190549]
- tests: py: complete icmp and icmpv6 update (Phil Sutter) [RHEL-190549]
- src: disentangle ICMP code types (Phil Sutter) [RHEL-190549]
- evaluate: display "Range negative size" error (Phil Sutter) [RHEL-190549]
- netlink_delinearize: restore binop syntax when listing ruleset for flags (Phil Sutter) [RHEL-190549]
- doc: libnftables-json: Drop invalid ops from match expression (Phil Sutter) [RHEL-190549]
- parser: json: Support for synproxy objects (Phil Sutter) [RHEL-190549]
- tests: py: add payload merging test cases (Phil Sutter) [RHEL-190549]
- nftables: do mot merge payloads on negation (Phil Sutter) [RHEL-190549]
- rule: fix ASAN errors in chain priority to textual names (Phil Sutter) [RHEL-190549]
- parser: compact type/typeof set rules (Phil Sutter) [RHEL-190549]
- parser: compact interval typeof rules (Phil Sutter) [RHEL-190549]
- src: improve error reporting for destroy command (Phil Sutter) [RHEL-190549]
- tests: shell: permit use of host-endian constant values in set lookup keys (Phil Sutter) [RHEL-190549]
- evaluate: permit use of host-endian constant values in set lookup keys (Phil Sutter) [RHEL-190549]
- expression: missing line in describe command with invalid expression (Phil Sutter) [RHEL-190549]
- netlink_delinearize: move concat and value postprocessing to helpers (Phil Sutter) [RHEL-190549]
- evaluate: skip byteorder conversion for selector smaller than 2 bytes (Phil Sutter) [RHEL-190549]
- cache: Optimize caching for 'list tables' command (Phil Sutter) [RHEL-190549]
- evaluate: fix check for unknown in cmd_op_to_name (Phil Sutter) [RHEL-190549]
- evaluate: don't assert on net/transport header conflict (Phil Sutter) [RHEL-190549]
- json: Support sets' auto-merge option (Phil Sutter) [RHEL-190549]
- rule: fix sym refcount assertion (Phil Sutter) [RHEL-190549]
- evaluate: error out when store needs more than one 128bit register of align fixup (Phil Sutter) [RHEL-190549]
- evaluate: do not fetch next expression on runaway number of concatenation components (Phil Sutter) [RHEL-190549]
- evaluate: skip anonymous set optimization for concatenations (Phil Sutter) [RHEL-190549]
- evaluate: add missing range checks for dup,fwd and payload statements (Phil Sutter) [RHEL-190549]
- doc: incorrect datatype description for icmpv6_type and icmpvx_code (Phil Sutter) [RHEL-190549]
- tests: shell: prefer project nft to system-wide nft (Phil Sutter) [RHEL-190549]
- parser_bison: ensure all timeout policy names are released (Phil Sutter) [RHEL-190549]
- netlink: fix stack overflow due to erroneous rounding (Phil Sutter) [RHEL-190549]
- parser_bison: error out on duplicated type/typeof/element keywords (Phil Sutter) [RHEL-190549]
- tests: shell: add test to cover payload transport match and mangle (Phil Sutter) [RHEL-190549]
- evaluate: fix stack overflow with huge priority string (Phil Sutter) [RHEL-190549]
- src: reject large raw payload and concat expressions (Phil Sutter) [RHEL-190549]
- evaluate: exthdr: statement arg must be not be a range (Phil Sutter) [RHEL-190549]
- meta: fix tc classid parsing out-of-bounds access (Phil Sutter) [RHEL-190549]
- parser_bison: close chain scope before chain release (Phil Sutter) [RHEL-190549]
- evaluate: fix bogus assertion failure with boolean datatype (Phil Sutter) [RHEL-190549]
- parser_bison: fix objref statement corruption (Phil Sutter) [RHEL-190549]
- tests: py: missing json output in meta.t with vlan mapping (Phil Sutter) [RHEL-190549]
- evaluate: reset statement length context before evaluating statement (Phil Sutter) [RHEL-190549]
- parser: tcpopt: fix tcp option parsing with NUM + length field (Phil Sutter) [RHEL-190549]
- evaluate: reject set definition with no key (Phil Sutter) [RHEL-190549]
- monitor: add support for concatenated set ranges (Phil Sutter) [RHEL-190549]
- evaluate: disable meta set with ranges (Phil Sutter) [RHEL-190549]
- evaluate: prevent assert when evaluating very large shift values (Phil Sutter) [RHEL-190549]
- evaluate: reject sets with no key (Phil Sutter) [RHEL-190549]
- evaluate: clone unary expression datatype to deal with dynamic datatype (Phil Sutter) [RHEL-190549]
- tests: shell: split nat inet tests (Phil Sutter) [RHEL-190549]
- evaluate: bogus error when adding devices to flowtable (Phil Sutter) [RHEL-190549]
- tests: shell: flush connlimit sets (Phil Sutter) [RHEL-190549]
- tests: shell: adjust add-after-delete flowtable for older kernels (Phil Sutter) [RHEL-190549]
- evaluate: fix rule replacement with anon sets (Phil Sutter) [RHEL-190549]
- tests: shell: skip if kernel does not support flowtable counter (Phil Sutter) [RHEL-190549]
- tests: shell: restore pipapo and chain binding coverage in standalone 30s-stress (Phil Sutter) [RHEL-190549]
- json: fix use after free in table_flags_json() (Phil Sutter) [RHEL-190549]
- src: expand create commands (Phil Sutter) [RHEL-190549]
- tests: shell: split set NAT interval test (Phil Sutter) [RHEL-190549]
- tests: shell: split merge nat optimization in two tests (Phil Sutter) [RHEL-190549]
- netlink: fix buffer size for user data in netlink_delinearize_chain() (Phil Sutter) [RHEL-190549]
- src: remove xfree() and use plain free() (Phil Sutter) [RHEL-190549]
- src: add free_const() and use it instead of xfree() (Phil Sutter) [RHEL-190549]
- evaluate: place byteorder conversion before rshift in payload expressions (Phil Sutter) [RHEL-190549]
- evaluate: reset statement length context only for set mappings (Phil Sutter) [RHEL-190549]
- meta: fix hour decoding when timezone offset is negative (Phil Sutter) [RHEL-190549]
- tproxy: Drop artificial port printing restriction (Phil Sutter) [RHEL-190549]
- tests/shell: fix mount command in "test-wrapper.sh" (Phil Sutter) [RHEL-190549]
- parser_bison: fix length check for ifname in ifname_expr_alloc() (Phil Sutter) [RHEL-190549]
- tests/shell: cover long interface name in "0042chain_variable_0" test (Phil Sutter) [RHEL-190549]
- tests/shell: add missing "elem_opts_compat_0.nodump" file (Phil Sutter) [RHEL-190549]
- parser_bison: Fix for broken compatibility with older dumps (Phil Sutter) [RHEL-190549]
Resolves: RHEL-190549
|
||
|---|---|---|
| .fmf | ||
| plans | ||
| .gitignore | ||
| 0001-Add-support-for-table-s-persist-flag.patch | ||
| 0002-cache-Always-set-NFT_CACHE_TERSE-for-list-cmd-with-t.patch | ||
| 0003-json-deal-appropriately-with-multidevice-in-chain.patch | ||
| 0004-parser_json-fix-handle-memleak-from-error-path.patch | ||
| 0005-tests-shell-Fix-sets-reset_command_0-for-current-ker.patch | ||
| 0006-tests-shell-connect-chains-to-hook-point.patch | ||
| 0007-datatype-rt_symbol_table_init-to-search-for-iproute2.patch | ||
| 0008-tests-py-remove-huge-limit-test-cases.patch | ||
| 0009-tests-py-add-missing-json.output-data.patch | ||
| 0010-tests-py-missing-json-output-in-never-merge-across-n.patch | ||
| 0011-Revert-doc-part-of-src-add-tcp-option-reset-support.patch | ||
| 0012-Revert-doc-part-of-meta-introduce-meta-broute-suppor.patch | ||
| 0013-Revert-doc-part-of-exthdr-add-boolean-DCCP-option-ma.patch | ||
| 0014-src-netlink-fix-crash-when-ops-doesn-t-support-udata.patch | ||
| 0015-src-fix-reset-element-support-for-interval-set-type.patch | ||
| 0016-parser_bison-Fix-for-broken-compatibility-with-older.patch | ||
| 0017-tests-shell-add-missing-elem_opts_compat_0.nodump-fi.patch | ||
| 0018-tests-shell-cover-long-interface-name-in-0042chain_v.patch | ||
| 0019-parser_bison-fix-length-check-for-ifname-in-ifname_e.patch | ||
| 0020-tests-shell-fix-mount-command-in-test-wrapper.sh.patch | ||
| 0021-tproxy-Drop-artificial-port-printing-restriction.patch | ||
| 0022-meta-fix-hour-decoding-when-timezone-offset-is-negat.patch | ||
| 0023-evaluate-reset-statement-length-context-only-for-set.patch | ||
| 0024-evaluate-place-byteorder-conversion-before-rshift-in.patch | ||
| 0025-src-add-free_const-and-use-it-instead-of-xfree.patch | ||
| 0026-src-remove-xfree-and-use-plain-free.patch | ||
| 0027-netlink-fix-buffer-size-for-user-data-in-netlink_del.patch | ||
| 0028-tests-shell-split-merge-nat-optimization-in-two-test.patch | ||
| 0029-tests-shell-split-set-NAT-interval-test.patch | ||
| 0030-src-expand-create-commands.patch | ||
| 0031-json-fix-use-after-free-in-table_flags_json.patch | ||
| 0032-tests-shell-restore-pipapo-and-chain-binding-coverag.patch | ||
| 0033-tests-shell-skip-if-kernel-does-not-support-flowtabl.patch | ||
| 0034-evaluate-fix-rule-replacement-with-anon-sets.patch | ||
| 0035-tests-shell-adjust-add-after-delete-flowtable-for-ol.patch | ||
| 0036-tests-shell-flush-connlimit-sets.patch | ||
| 0037-evaluate-bogus-error-when-adding-devices-to-flowtabl.patch | ||
| 0038-tests-shell-split-nat-inet-tests.patch | ||
| 0039-evaluate-clone-unary-expression-datatype-to-deal-wit.patch | ||
| 0040-evaluate-reject-sets-with-no-key.patch | ||
| 0041-evaluate-prevent-assert-when-evaluating-very-large-s.patch | ||
| 0042-evaluate-disable-meta-set-with-ranges.patch | ||
| 0043-monitor-add-support-for-concatenated-set-ranges.patch | ||
| 0044-evaluate-reject-set-definition-with-no-key.patch | ||
| 0045-parser-tcpopt-fix-tcp-option-parsing-with-NUM-length.patch | ||
| 0046-evaluate-reset-statement-length-context-before-evalu.patch | ||
| 0047-tests-py-missing-json-output-in-meta.t-with-vlan-map.patch | ||
| 0048-parser_bison-fix-objref-statement-corruption.patch | ||
| 0049-evaluate-fix-bogus-assertion-failure-with-boolean-da.patch | ||
| 0050-parser_bison-close-chain-scope-before-chain-release.patch | ||
| 0051-meta-fix-tc-classid-parsing-out-of-bounds-access.patch | ||
| 0052-evaluate-exthdr-statement-arg-must-be-not-be-a-range.patch | ||
| 0053-src-reject-large-raw-payload-and-concat-expressions.patch | ||
| 0054-evaluate-fix-stack-overflow-with-huge-priority-strin.patch | ||
| 0055-tests-shell-add-test-to-cover-payload-transport-matc.patch | ||
| 0056-parser_bison-error-out-on-duplicated-type-typeof-ele.patch | ||
| 0057-netlink-fix-stack-overflow-due-to-erroneous-rounding.patch | ||
| 0058-parser_bison-ensure-all-timeout-policy-names-are-rel.patch | ||
| 0059-tests-shell-prefer-project-nft-to-system-wide-nft.patch | ||
| 0060-doc-incorrect-datatype-description-for-icmpv6_type-a.patch | ||
| 0061-evaluate-add-missing-range-checks-for-dup-fwd-and-pa.patch | ||
| 0062-evaluate-skip-anonymous-set-optimization-for-concate.patch | ||
| 0063-evaluate-do-not-fetch-next-expression-on-runaway-num.patch | ||
| 0064-evaluate-error-out-when-store-needs-more-than-one-12.patch | ||
| 0065-rule-fix-sym-refcount-assertion.patch | ||
| 0066-json-Support-sets-auto-merge-option.patch | ||
| 0067-evaluate-don-t-assert-on-net-transport-header-confli.patch | ||
| 0068-evaluate-fix-check-for-unknown-in-cmd_op_to_name.patch | ||
| 0069-cache-Optimize-caching-for-list-tables-command.patch | ||
| 0070-evaluate-skip-byteorder-conversion-for-selector-smal.patch | ||
| 0071-netlink_delinearize-move-concat-and-value-postproces.patch | ||
| 0072-expression-missing-line-in-describe-command-with-inv.patch | ||
| 0073-evaluate-permit-use-of-host-endian-constant-values-i.patch | ||
| 0074-tests-shell-permit-use-of-host-endian-constant-value.patch | ||
| 0075-src-improve-error-reporting-for-destroy-command.patch | ||
| 0076-parser-compact-interval-typeof-rules.patch | ||
| 0077-parser-compact-type-typeof-set-rules.patch | ||
| 0078-rule-fix-ASAN-errors-in-chain-priority-to-textual-na.patch | ||
| 0079-nftables-do-mot-merge-payloads-on-negation.patch | ||
| 0080-tests-py-add-payload-merging-test-cases.patch | ||
| 0081-parser-json-Support-for-synproxy-objects.patch | ||
| 0082-doc-libnftables-json-Drop-invalid-ops-from-match-exp.patch | ||
| 0083-netlink_delinearize-restore-binop-syntax-when-listin.patch | ||
| 0084-evaluate-display-Range-negative-size-error.patch | ||
| 0085-src-disentangle-ICMP-code-types.patch | ||
| 0086-tests-py-complete-icmp-and-icmpv6-update.patch | ||
| 0087-tests-shell-payload-matching-requires-egress-support.patch | ||
| 0088-tests-shell-check-for-reset-tcp-options-support.patch | ||
| 0089-doc-nft.8-Two-minor-synopsis-fixups.patch | ||
| 0090-mergesort-Avoid-accidental-set-element-reordering.patch | ||
| 0091-doc-nft.8-Fix-markup-in-ct-expectation-synopsis.patch | ||
| 0092-cache-check-for-NFT_CACHE_REFRESH-in-current-request.patch | ||
| 0093-evaluate-bogus-protocol-conflicts-in-vlan-with-impli.patch | ||
| 0094-evaluate-Fix-incorrect-checking-the-base-variable-in.patch | ||
| 0095-scanner-inet_pton-allows-for-broader-IPv4-Mapped-IPv.patch | ||
| 0096-monitor-too-large-shift-exponent-displaying-payload-.patch | ||
| 0097-cmd-provide-better-hint-if-chain-is-already-declared.patch | ||
| 0098-cmd-skip-variable-set-elements-when-collapsing-comma.patch | ||
| 0099-tests-shell-skip-ip-option-tests-if-kernel-does-not-.patch | ||
| 0100-src-add-string-preprocessor-and-use-it-for-log-prefi.patch | ||
| 0101-intervals-fix-element-deletions-with-maps.patch | ||
| 0102-parser_bison-recursive-table-declaration-in-deprecat.patch | ||
| 0103-evaluate-set-on-expr-len-for-catchall-set-elements.patch | ||
| 0104-segtree-set-on-EXPR_F_KERNEL-flag-for-catchall-eleme.patch | ||
| 0105-optimize-clone-counter-before-insertion-into-set-ele.patch | ||
| 0106-libnftables-skip-useable-checks-for-dev-stdin.patch | ||
| 0107-parser_json-use-stdin-buffer-if-available.patch | ||
| 0108-optimize-skip-variables-in-nat-statements.patch | ||
| 0109-datatype-reject-rate-in-quota-statement.patch | ||
| 0110-cache-rule-by-index-requires-full-cache.patch | ||
| 0111-datatype-improve-error-reporting-when-time-unit-is-n.patch | ||
| 0112-parser_bison-allow-0-burst-in-limit-rate-byte-mode.patch | ||
| 0113-parser_json-fix-crash-in-json_parse_set_stmt_list.patch | ||
| 0114-json-Support-maps-with-concatenated-data.patch | ||
| 0115-parser_json-release-buffer-returned-by-json_dumps.patch | ||
| 0116-parser_json-fix-several-expression-memleaks-from-err.patch | ||
| 0117-cache-reset-filter-for-each-command.patch | ||
| 0118-cache-accumulate-flags-in-batch.patch | ||
| 0119-cache-only-dump-rules-for-the-given-table.patch | ||
| 0120-cache-add-filtering-support-for-objects.patch | ||
| 0121-cache-consolidate-reset-command.patch | ||
| 0122-cache-assert-filter-when-calling-nft_cache_evaluate.patch | ||
| 0123-cache-remove-full-cache-requirement-when-echo-flag-i.patch | ||
| 0124-cache-relax-requirement-for-replace-rule-command.patch | ||
| 0125-cache-position-does-not-require-full-cache.patch | ||
| 0126-libnftables-Zero-ctx-vars-after-freeing-it.patch | ||
| 0127-tests-shell-stabilize-packetpath-payload.patch | ||
| 0128-proto-use-NFT_PAYLOAD_L4CSUM_PSEUDOHDR-flag-to-mangl.patch | ||
| 0129-tests-py-fix-up-udp-csum-fixup-output.patch | ||
| 0130-cache-initialize-filter-when-fetching-implicit-chain.patch | ||
| 0131-libnftables-json-fix-raw-payload-expression-document.patch | ||
| 0132-src-collapse-set-element-commands-from-parser.patch | ||
| 0133-rule-netlink-attribute-offset-is-uint32_t-for-struct.patch | ||
| 0134-mnl-update-cmd_add_loc-to-take-struct-nlmsghdr.patch | ||
| 0135-mnl-rename-to-mnl_seqnum_alloc-to-mnl_seqnum_inc.patch | ||
| 0136-src-fix-extended-netlink-error-reporting-with-large-.patch | ||
| 0137-tests-monitor-fix-up-test-case-breakage.patch | ||
| 0138-doc-extend-description-of-fib-expression.patch | ||
| 0139-json-collapse-set-element-commands-from-parser.patch | ||
| 0140-json-Support-typeof-in-set-and-map-types.patch | ||
| 0141-tests-py-Fix-for-storing-payload-into-missing-file.patch | ||
| 0142-optimize-compare-expression-length.patch | ||
| 0143-intervals-set-internal-element-location-with-the-del.patch | ||
| 0144-parser_bison-fix-UaF-when-reporting-table-parse-erro.patch | ||
| 0145-intervals-add-helper-function-to-set-previous-elemen.patch | ||
| 0146-src-add-EXPR_RANGE_VALUE-expression-and-use-it.patch | ||
| 0147-intervals-do-not-merge-intervals-with-different-time.patch | ||
| 0148-evaluate-remove-variable-shadowing.patch | ||
| 0149-netlink_delinarize-fix-bogus-munging-of-mask-value.patch | ||
| 0150-ipopt-use-ipv4-address-datatype-for-address-field-in.patch | ||
| 0151-tests-shell-delete-netdev-chain-after-test.patch | ||
| 0152-datatype-clamp-boolean-value-to-0-and-1.patch | ||
| 0153-parser_bison-turn-redundant-ip-option-type-field-mat.patch | ||
| 0154-parser_bison-compact-and-simplify-list-and-reset-syn.patch | ||
| 0155-evaluate-auto-merge-is-only-available-for-singleton-.patch | ||
| 0156-fib-Change-data-type-of-fib-oifname-to-ifname.patch | ||
| 0157-evaluate-optimize-zero-length-range.patch | ||
| 0158-payload-return-early-if-dependency-is-not-a-payload-.patch | ||
| 0159-payload-honor-inner-payload-description-in-payload_e.patch | ||
| 0160-segtree-fix-string-data-initialisation.patch | ||
| 0161-evaluate-release-existing-datatype-when-evaluating-u.patch | ||
| 0162-segtree-incomplete-output-in-get-element-command-wit.patch | ||
| 0163-src-do-not-merge-a-set-with-a-erroneous-one.patch | ||
| 0164-tests-shell-detach-synproxy-test.patch | ||
| 0165-src-print-set-element-with-multi-word-description-in.patch | ||
| 0166-netlink-fix-stack-buffer-overrun-when-emitting-range.patch | ||
| 0167-parser_bison-reject-non-serializeable-typeof-express.patch | ||
| 0168-evaluate-don-t-allow-nat-map-with-specified-protocol.patch | ||
| 0169-evaluate-fix-assertion-failure-with-malformed-map-de.patch | ||
| 0170-tests-shell-extend-coverage-for-set-element-statemen.patch | ||
| 0171-parser_bison-consolidate-counter-grammar-rule-for-se.patch | ||
| 0172-parser_bison-consolidate-limit-grammar-rule-for-set-.patch | ||
| 0173-parser_bison-consolidate-quota-grammar-rule-for-set-.patch | ||
| 0174-parser_bison-consolidate-last-grammar-rule-for-set-e.patch | ||
| 0175-parser_bison-consolidate-connlimit-grammar-rule-for-.patch | ||
| 0176-json-make-sure-timeout-list-is-initialised.patch | ||
| 0177-evaluate-don-t-update-cache-for-anonymous-chains.patch | ||
| 0178-tests-shell-missing-ct-count-elements-in-new-set_stm.patch | ||
| 0179-optimize-compact-bitmask-matching-in-set-map.patch | ||
| 0180-optimize-incorrect-comparison-for-reject-statement.patch | ||
| 0181-json-don-t-BUG-when-asked-to-list-synproxies.patch | ||
| 0182-evaluate-compact-STMT_F_STATEFUL-checks.patch | ||
| 0183-evaluate-only-allow-stateful-statements-in-set-and-m.patch | ||
| 0184-cache-don-t-crash-when-filter-is-NULL.patch | ||
| 0185-optimize-expand-expression-list-when-merging-into-co.patch | ||
| 0186-cache-prevent-possible-crash-rule-filter-is-NULL.patch | ||
| 0187-parser_json-allow-statement-stateful-statement-only-.patch | ||
| 0188-parser_json-reject-empty-jump-goto-chain.patch | ||
| 0189-parser_json-bail-out-on-malformed-statement-in-set.patch | ||
| 0190-evaluate-bail-out-if-ct-saddr-daddr-dependency-canno.patch | ||
| 0191-optimize-invalidate-merge-in-case-of-duplicated-key-.patch | ||
| 0192-parser_bison-add-selector_expr-rule-to-restrict-type.patch | ||
| 0193-netlink-bogus-concatenated-set-ranges-with-netlink-m.patch | ||
| 0194-doc-Fix-typo-in-nat-statement-prefix-description.patch | ||
| 0195-parser_json-Introduce-parse_flags_array.patch | ||
| 0196-json-Print-single-synproxy-flags-as-non-array.patch | ||
| 0197-json-Print-single-set-flag-as-non-array.patch | ||
| 0198-tests-shell-Add-test-case-for-JSON-flags-arrays.patch | ||
| 0199-json-Print-single-fib-flag-as-non-array.patch | ||
| 0200-json-Accept-more-than-two-operands-in-binary-express.patch | ||
| 0201-json-Fix-for-memleak-in-__binop_expr_json.patch | ||
| 0202-json-Introduce-json_add_array_new.patch | ||
| 0203-netlink-Catch-unknown-types-when-deserializing-objec.patch | ||
| 0204-netlink-Avoid-potential-NULL-ptr-deref-parsing-set-e.patch | ||
| 0205-tests-shell-check-for-features-not-available-in-5.4.patch | ||
| 0206-tests-py-fix-json-single-flag-output-for-fib-synprox.patch | ||
| 0207-json-prevent-null-deref-if-chain-policy-is-not-set.patch | ||
| 0208-json-work-around-fuzzer-induced-assert-crashes.patch | ||
| 0209-netlink-Fix-for-potential-crash-parsing-a-flowtable.patch | ||
| 0210-netlink-Do-not-allocate-a-bogus-flowtable-priority-e.patch | ||
| 0211-tests-monitor-Fix-for-single-flag-array-avoidance.patch | ||
| 0212-tests-shell-combine-dormant-flag-with-netdevice-remo.patch | ||
| 0213-tests-shell-Adjust-to-ifname-based-hooks.patch | ||
| 0214-tests-py-Properly-fix-JSON-equivalents-for-netdev-re.patch | ||
| 0215-netlink-Avoid-crash-upon-missing-NFTNL_OBJ_CT_TIMEOU.patch | ||
| 0216-src-BASECHAIN-flag-no-longer-implies-presence-of-pri.patch | ||
| 0217-tests-py-prepare-for-set-debug-change.patch | ||
| 0218-debug-include-kernel-set-information-on-cache-fill.patch | ||
| 0219-parser_bison-allow-delete-command-with-map-via-handl.patch | ||
| 0220-rule-skip-fuzzy-lookup-if-object-name-is-not-availab.patch | ||
| 0221-parser_bison-only-reset-by-name-is-supported-by-now.patch | ||
| 0222-cache-assert-name-is-non-nul-when-looking-up.patch | ||
| 0223-tests-py-clean-up-set-backend-support-fallout.patch | ||
| 0224-json-reject-too-long-interface-names.patch | ||
| 0225-tests-shell-Fix-ifname_based_hooks-feature-check.patch | ||
| 0226-fib-allow-to-check-if-route-exists-in-maps.patch | ||
| 0227-fib-allow-to-use-it-in-set-statements.patch | ||
| 0228-tests-py-re-enables-nft-test.py-to-load-the-local-nf.patch | ||
| 0229-rule-print-chain-and-flowtable-devices-in-quotes.patch | ||
| 0230-evaluate-validate-set-expression-type-before-accessi.patch | ||
| 0231-mnl-Call-mnl_attr_nest_end-just-once.patch | ||
| 0232-doc-nft.8-Minor-NAT-STATEMENTS-section-review.patch | ||
| 0233-src-netlink-netlink_delinearize_table-may-return-NUL.patch | ||
| 0234-tests-py-Drop-stale-entries-since-redundant-test-cas.patch | ||
| 0235-tests-py-Drop-duplicate-test-from-inet-geneve.t.patch | ||
| 0236-tests-py-Drop-duplicate-test-from-inet-gre.t.patch | ||
| 0237-tests-py-Drop-duplicate-test-from-inet-gretap.t.patch | ||
| 0238-tests-py-Drop-stale-entry-from-inet-tcp.t.json.patch | ||
| 0239-tests-py-Drop-duplicate-test-from-inet-vxlan.t.patch | ||
| 0240-tests-py-Drop-stale-entry-from-ip-snat.t.json.patch | ||
| 0241-tests-py-Drop-stale-entries-from-ip6-ct-meta-.t.json.patch | ||
| 0242-tests-py-Drop-stale-entry-from-ip-snat.t.payload.patch | ||
| 0243-tests-py-Fix-tests-added-for-icmpv6-taddr-support.patch | ||
| 0244-json-Do-not-reduce-single-item-arrays-on-output.patch | ||
| 0245-segtree-incorrect-type-when-aggregating-concatenated.patch | ||
| 0246-src-ensure-chain-policy-evaluation-when-specified.patch | ||
| 0247-fib-restore-JSON-output-for-relational-expressions.patch | ||
| 0248-mnl-silence-compiler-warning.patch | ||
| 0249-tests-monitor-Fix-for-flag-arrays-in-JSON-output.patch | ||
| 0250-mnl-continue-on-ENOBUFS-errors-when-processing-batch.patch | ||
| 0251-monitor-Quote-device-names-in-chain-declarations-too.patch | ||
| 0252-tests-monitor-Fix-regex-collecting-expected-echo-out.patch | ||
| 0253-monitor-Recognize-flowtable-add-del-events.patch | ||
| 0254-monitor-Inform-JSON-printer-when-reporting-an-object.patch | ||
| 0255-tests-Prepare-exit-codes-for-automake.patch | ||
| 0256-fib-Fix-for-existence-check-on-Big-Endian.patch | ||
| 0257-tests-py-objects.t-must-use-input-not-output.patch | ||
| 0258-doc-fix-tcpdump-example.patch | ||
| 0259-src-parser_json-fix-format-string-bugs.patch | ||
| 0260-optimize-Fix-verdict-expression-comparison.patch | ||
| 0261-datatype-Fix-boolean-type-on-Big-Endian.patch | ||
| 0262-tests-py-any-ct.t.json.output-Drop-leftover-entry.patch | ||
| 0263-tests-py-Fix-for-using-wrong-payload-path.patch | ||
| 0264-tests-py-Do-not-rely-upon-end-marker.patch | ||
| 0265-tests-py-inet-osf.t-Fix-element-ordering-in-JSON-equ.patch | ||
| 0266-tests-py-Implement-payload_record.patch | ||
| 0267-doc-don-t-suggest-to-disable-GSO.patch | ||
| 0268-doc-libnftables-json-Describe-RULESET-object.patch | ||
| 0269-rule-skip-CMD_OBJ_SETELEMS-with-no-elements-after-se.patch | ||
| 0270-tests-json_echo-Drop-rule-handle-before-multi-add.patch | ||
| 0271-monitor-fix-memleak-in-setelem-cb.patch | ||
| 0272-tcpopt-add-symbol-table-for-mptcp-suboptions.patch | ||
| 0273-netlink_delinearize-also-consider-exthdr-type-when-t.patch | ||
| 0274-expression-propagate-key-datatype-for-anonymous-sets.patch | ||
| 0275-expression-expr_build_udata_recurse-should-recurse.patch | ||
| 0276-tests-py-any-tcpopt.t.json-Fix-JSON-equivalent.patch | ||
| 0277-mergesort-Fix-sorting-of-string-values.patch | ||
| 0278-mergesort-Align-concatenation-sort-order-with-Big-En.patch | ||
| 0279-segtree-Fix-range-aggregation-on-Big-Endian.patch | ||
| 0280-json-complete-multi-statement-set-element-support.patch | ||
| 0281-parser_bison-add-range-check-for-synproxy-wscale.patch | ||
| 0282-cache-Relax-chain_cache_dump-filter-application.patch | ||
| 0283-cache-Include-chains-flowtables-and-objects-in-netli.patch | ||
| 0284-cache-Respect-family-in-all-list-commands.patch | ||
| 0285-cache-Filter-for-table-when-listing-sets-or-maps.patch | ||
| 0286-cache-Filter-for-table-when-listing-flowtables.patch | ||
| 0287-segtree-Fix-for-variable-sized-object-may-not-be-ini.patch | ||
| 0288-mnl-Fix-ordering-of-hooks-in-list-hooks-output.patch | ||
| 0289-tests-py-don-t-use-a-fixed-filename.patch | ||
| 0290-tests-py-print-the-file-name-as-intended.patch | ||
| 0291-tests-py-osf-is-ip-only.patch | ||
| 0292-cache-honor-c-check-for-reset-commands.patch | ||
| 0293-parser_json-fix-map-set-type-confusion-crash-in-map-.patch | ||
| 0294-segtree-rename-set_elem_add-to-set_elem_expr_add.patch | ||
| 0295-src-remove-EXPR_SET_ELEM-in-range_expr_value_-low-hi.patch | ||
| 0296-segtree-replace-default-case-by-specific-types-in-ge.patch | ||
| 0297-segtree-fix-get-element-command-with-open-intervals.patch | ||
| 0298-tests-py-Fix-keep-test-runner-option.patch | ||
| 0299-datatype-don-t-return-a-const-string-from-cgroupv2_g.patch | ||
| 0300-rule-constify-set_is_non_concat_range.patch | ||
| 0301-tests-py-Fix-some-JSON-equivalents.patch | ||
| 0302-json-Dump-flowtable-hook-spec-only-if-present.patch | ||
| 0303-tests-monitor-enclose-device-names-in-quotes.patch | ||
| 0304-tests-monitor-Extend-testcases-a-bit.patch | ||
| 0305-tests-monitor-Label-diffs-to-help-users.patch | ||
| 0306-tests-monitor-Run-in-own-netns.patch | ||
| 0307-tests-monitor-Become-PWD-agnostic.patch | ||
| 0308-tests-monitor-Test-JSON-echo-mode-as-well.patch | ||
| 0309-tests-monitor-Excercise-all-syntaxes-and-variants-by.patch | ||
| 0310-tests-monitor-Fix-for-out-of-path-call.patch | ||
| gating.yaml | ||
| main.nft | ||
| monitor_run-tests.stderr.expect | ||
| nat.nft | ||
| nft-test.stderr.expect | ||
| nftables.conf | ||
| nftables.service | ||
| nftables.spec | ||
| router.nft | ||
| rpminspect.yaml | ||
| run-tests.stderr.expect | ||
| sources | ||