Arturo Borrero Gonzalez (4): nft: don't use xzalloc() libnftables: reallocate definition of nft_print() and nft_gmp_print() libnftables: export public symbols only doc: don't check asciidoc output with xmllint Brett Mastbergen (1): src: Sync comments with current expr definition Fernando Fernandez Mancera (7): src: introduce SYNPROXY matching json: fix synproxy flag parser typo tests: py: add missing json outputs include: json: add missing synproxy stmt print stub src: osf: fix snprintf -Wformat-truncation warning src: allow variables in the chain priority specification src: allow variable in chain policy Florian Westphal (17): src/ct: provide fixed data lengh sizes for ip/ip6 keys proto: add pseudo th protocol to match d/sport in generic way tests: shell: make sure we test nft binary from working tree, not host tests: fix up two broken json test cases doc: fib: explain example in more detail src: evaluate: support prefix expression in statements tests: shell: check for table re-definition usecase doc: fib: explain example in more detail scanner: don't rely on fseek for input stream repositioning src: mnl: fix setting rcvbuffer size src: fix jumps on bigendian arches src: parser: fix parsing of chain priority and policy on bigendian src: mnl: retry when we hit -ENOBUFS src: json: support json restore for "th" pseudoheader src: json: fix constant parsing on bigendian tests: make sure i is defined src: libnftnl: run single-initcalls only once Jan Engelhardt (3): build: unbreak non-functionality of --disable-python build: avoid recursion into py/ if not selected build: avoid unnecessary call to xargs Jeremy Sowden (2): libnftables: get rid of repeated initialization of netlink_ctx rule: removed duplicate member initializer. Laura Garcia Liebana (2): src: enable set expiration date for set elements cache: incorrect flush flag for table/chain M. Braun (2): src: Fix dumping vlan rules tests: add json test for vlan rule fix Pablo Neira Ayuso (26): monitor: fix double cache update with --echo tests: shell: restore element expiration parser_bison: do not enforce semicolon from ct helper block rule: do not print semicolon in ct timeout rule: print space between policy and timeout mnl: remove unnecessary NLM_F_ACK flags tests: shell: update test to include reset command ipopt: missing ipopt.h and ipopt.c files src: use malloc() and free() from cli and main main: replace NFT_EXIT_NOMEM by EXIT_FAILURE cli: remove useless #include headers src: add set_is_datamap(), set_is_objmap() and set_is_map() helpers evaluate: missing object maps handling in list and flush commands src: use set_is_anonymous() evaluate: honor NFT_SET_OBJECT flag cache: incorrect flags for create commands evaluate: missing basic evaluation of expectations evaluate: bogus error when refering to existing non-base chain evaluate: missing location for chain nested in table definition cache: add NFT_CACHE_UPDATE and NFT_CACHE_FLUSHED flags src: add parse_ctx object src: remove global symbol_table tests: shell: move chain priority and policy to chain folder include: refresh nf_tables.h cached copy gmputil: assert length is non-zero build: Bump version to v0.9.2 Phil Sutter (7): json: Print newline at end of list output main: Bail if non-available JSON was requested files: Move netdev-ingress.nft to /etc/nftables as well files: Add inet family nat config json: Fix memleak in timeout_policy_json() parser_bison: Fix for deprecated statements src: Call bison with -Wno-yacc to silence warnings Shekhar Sharma (1): tests: py: fix python3 Stephen Suryaputra (1): exthdr: add support for matching IPv4 options Stéphane Veyret (1): src: add ct expectations support