From: Florian Westphal Date: Sun, 19 Nov 2023 12:05:55 +0000 (+0100) Subject: evaluate: fix rule replacement with anon sets X-Git-Tag: v1.1.0~216 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=256904b1ded6314974dddc75726149f7b19d33f4;p=thirdparty%2Fnftables.git evaluate: fix rule replacement with anon sets nft replace rule t c handle 3 'jhash ip protocol . ip saddr mod 170 vmap { 0-94 : goto wan1, 95-169 : goto wan2, 170-269 }"' BUG: unhandled op 2 nft: src/evaluate.c:1748: interval_set_eval: Assertion `0' failed. Fixes: 81e36530fcac ("src: replace interval segment tree overlap and automerge") Reported-by: Tino Reichardt Signed-off-by: Florian Westphal --- diff --git a/src/evaluate.c b/src/evaluate.c index d1ec6ec4..13b6a603 100644 --- a/src/evaluate.c +++ b/src/evaluate.c @@ -1729,6 +1729,7 @@ static int interval_set_eval(struct eval_ctx *ctx, struct set *set, switch (ctx->cmd->op) { case CMD_CREATE: case CMD_ADD: + case CMD_REPLACE: case CMD_INSERT: if (set->automerge) { ret = set_automerge(ctx->msgs, ctx->cmd, set, init,