]> git.ipfire.org Git - thirdparty/nftables.git/commit
evaluate: handle invalid mapping expressions in stateful object statements gracefully.
authorJeremy Sowden <jeremy@azazel.net>
Mon, 29 Apr 2024 19:27:52 +0000 (20:27 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 23 Jan 2025 00:35:35 +0000 (01:35 +0100)
commit8893f279392307f48694e6af617a16cd705a0f00
tree5135a8a24197508d82d9ba80e7c7e9e52a71a692
parentb448e8ed3dcfd03c2ba3d49f9b513b4f8940fb0b
evaluate: handle invalid mapping expressions in stateful object statements gracefully.

commit 52a7af9bec15a4fb4bfea86e40b70f96098f7dfd upstream.

Currently, they are reported as assertion failures:

  BUG: invalid mapping expression variable
  nft: src/evaluate.c:4618: stmt_evaluate_objref_map: Assertion `0' failed.
  Aborted

Instead, report them more informatively as errors:

  /space/azazel/tmp/ruleset.1067161.nft:15:29-38: Error: invalid mapping expression variable
      quota name ip saddr map $quota_map
                 ~~~~~~~~     ^^^^^^^^^^

Signed-off-by: Jeremy Sowden <jeremy@azazel.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
src/evaluate.c