From: Pablo Neira Ayuso <pablo@netfilter.org>
Date: Tue, 21 Jul 2020 00:11:56 +0000 (+0200)
Subject: rule: missing map command expansion
X-Git-Tag: v0.9.7~62
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=b47beb25afd4ebde6c6b46395838d9d397e2ba85;p=thirdparty%2Fnftables.git

rule: missing map command expansion

Maps also need to be split in two commands for proper error reporting.

Fixes: c9eae091983a ("src: add CMD_OBJ_SETELEMS")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
---

diff --git a/src/rule.c b/src/rule.c
index 6b71dfee..dadb26f8 100644
--- a/src/rule.c
+++ b/src/rule.c
@@ -1519,6 +1519,7 @@ void nft_cmd_expand(struct cmd *cmd)
 		list_splice(&new_cmds, &cmd->list);
 		break;
 	case CMD_OBJ_SET:
+	case CMD_OBJ_MAP:
 		set = cmd->set;
 		memset(&h, 0, sizeof(h));
 		handle_merge(&h, &set->handle);