]> git.ipfire.org Git - thirdparty/nftables.git/commit
evaluate: unbreak verdict maps with implicit map with interval concatenations
authorPablo Neira Ayuso <pablo@netfilter.org>
Wed, 16 Jun 2021 11:49:08 +0000 (13:49 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 18 Jun 2021 07:40:20 +0000 (09:40 +0200)
commita5674886b45c9b3489aef8cc7435dd85afa9494a
tree476ff27ba9faacfa1e217f643ff87f143cea9208
parentbd51f04f73bd585f6e3f9ed82a5db7d9640198b8
evaluate: unbreak verdict maps with implicit map with interval concatenations

Verdict maps in combination with interval concatenations are broken, e.g.

 # nft add rule x y tcp dport . ip saddr vmap { 1025-65535 . 192.168.10.2 : accept }

Retrieve the concatenation field length and count from the map->map
expressions that represents the key of the implicit map.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
src/evaluate.c
tests/py/ip/ip.t
tests/py/ip/ip.t.json
tests/py/ip/ip.t.payload
tests/py/ip/ip.t.payload.bridge
tests/py/ip/ip.t.payload.inet
tests/py/ip/ip.t.payload.netdev