]> git.ipfire.org Git - thirdparty/nftables.git/commit
segtree: incorrect type when aggregating concatenated set ranges
authorPablo Neira Ayuso <pablo@netfilter.org>
Wed, 13 Aug 2025 13:19:23 +0000 (15:19 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 19 Aug 2025 12:53:49 +0000 (14:53 +0200)
commitc44995e31ba60c4823bb81fecd29020452b9e702
tree851d4bca06b6ee8b8de16645e6df24c3f3ebbf15
parent5e492307c2c93b7eb654691ca87ddc7ad86640d8
segtree: incorrect type when aggregating concatenated set ranges

Uncovered by the compound_expr_remove() replacement by type safe function
coming after this patch.

Add expression to the concatenation which is reachable via expr_value().

This bug is subtle, I could not spot any reproducible buggy behaviour
when using the wrong type when running the existing tests.

Fixes: 8ac2f3b2fca3 ("src: Add support for concatenated set ranges")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
src/segtree.c