]> git.ipfire.org Git - thirdparty/nftables.git/commit
parser_json: reject empty jump/goto chain
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 31 Mar 2025 15:55:45 +0000 (17:55 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 13 Aug 2025 16:43:30 +0000 (18:43 +0200)
commit90f7f5065c8f3f7995fe5191e5e59c40f3a19a0e
tree3b25ef0773c4a1e31c2accd7fbebce0468c843fb
parentef9eb63b0d0e7ed91049ace1d9b4cab52627e080
parser_json: reject empty jump/goto chain

commit 9cce81701a033c4ff5e804fbf7a1149acb9e115a upstream.

When parsing a verdict map json where element jumps to chain represented
as empty string.

internal:0:0-0: Error: Parsing list expression item at index 0 failed.
internal:0:0-0: Error: Invalid set elem at index 0.
internal:0:0-0: Error: Invalid set elem expression.
internal:0:0-0: Error: Parsing command array at index 2 failed.

Fixes: 586ad210368b ("libnftables: Implement JSON parser")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
src/parser_json.c