]> git.ipfire.org Git - thirdparty/nftables.git/commit
projects / thirdparty / nftables.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e8f0fa2) | patch
optimize: fix vmap with anonymous sets
authorPablo Neira Ayuso <pablo@netfilter.org>
Thu, 3 Mar 2022 11:20:29 +0000 (12:20 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 3 Mar 2022 11:27:33 +0000 (12:27 +0100)
commit99eb46969f3d7ccd37899f2755055fe7511c46b0
tree2257e10537fd5c8f7834cfb4483855f24fb849b3tree | snapshot
parente8f0fa21fd77ecc51faf39cefa3cccdb7d6a30cfcommit | diff
optimize: fix vmap with anonymous sets

The following example ruleset crashes:

 table inet a {
        chain b {
                tcp dport { 1 } accept
                tcp dport 2-3 drop
        }
 }

because handling for EXPR_SET is missing.

Fixes: 1542082e259b ("optimize: merge same selector with different verdict into verdict map")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
src/optimize.c diff | blob | blame | history
tests/shell/testcases/optimizations/dumps/merge_stmts_vmap.nft diff | blob | blame | history
tests/shell/testcases/optimizations/merge_stmts_vmap diff | blob | blame | history
Mirror of git://git.netfilter.org/nftables