parser_json: allow statement stateful statement only in set elements

commit 85b5b051f0e64f106cee078fc6d66d0872770e79 upstream.

Upfront reject of non stateful statements in set elements.

Fixes: 07958ec53830 ("json: add set statement list support")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

diff --git a/src/parser_json.c b/src/parser_json.c
index c58a240a29df5922433c0f1dce4c7e55ace21fbd..799d0bd9ff357c7c5ae19b6e78139f1c4befeb18 100644 (file)
--- a/src/parser_json.c
+++ b/src/parser_json.c
@@ -2344,6 +2344,11 @@ static void json_parse_set_stmt_list(struct json_ctx *ctx,
                        stmt_list_free(stmt_list);
                        return;
                }
+               if (!(stmt->flags & STMT_F_STATEFUL)) {
+                       stmt_free(stmt);
+                       json_error(ctx, "Unsupported set statements array at index %zd failed.", index);
+                       stmt_list_free(stmt_list);
+               }
                list_add(&stmt->list, head);
                head = &stmt->list;
        }