]> git.ipfire.org Git - thirdparty/nftables.git/commitdiff
scanner: Fix for ipportmap nat statements
authorPhil Sutter <phil@nwl.cc>
Wed, 2 Mar 2022 13:45:49 +0000 (14:45 +0100)
committerPhil Sutter <phil@nwl.cc>
Wed, 2 Mar 2022 14:01:41 +0000 (15:01 +0100)
Due to lookahead, "addr" keyword is still found in IP/IP6 scope, not
STMT_NAT one.

Fixes: a67fce7ffe7e4 ("scanner: nat: Move to own scope")
Signed-off-by: Phil Sutter <phil@nwl.cc>
src/scanner.l

index fd1cf059a608ff510f1498cda959c399007ba4ca..2154281e765727b293d0c414c0bc5ad89802d3ed 100644 (file)
@@ -678,7 +678,7 @@ addrstring  ({macaddr}|{ip4addr}|{ip6addr})
 "rt0"                  { scanner_push_start_cond(yyscanner, SCANSTATE_EXPR_RT); return RT0; }
 "rt2"                  { scanner_push_start_cond(yyscanner, SCANSTATE_EXPR_RT); return RT2; }
 "srh"                  { scanner_push_start_cond(yyscanner, SCANSTATE_EXPR_RT); return RT4; }
-<SCANSTATE_EXPR_RT,SCANSTATE_STMT_NAT>"addr"                   { return ADDR; }
+<SCANSTATE_EXPR_RT,SCANSTATE_STMT_NAT,SCANSTATE_IP,SCANSTATE_IP6>"addr"                        { return ADDR; }
 
 "hbh"                  { scanner_push_start_cond(yyscanner, SCANSTATE_EXPR_HBH); return HBH; }