]> git.ipfire.org Git - thirdparty/ipset.git/commit
Fix IPv6 sets nftables translation
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 28 Feb 2022 18:52:57 +0000 (19:52 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 28 Feb 2022 19:00:24 +0000 (20:00 +0100)
commitbe7f6099feb7b5d34715b06f9308877cdcdc404a
treece8ef039d54e96869956478c94e92c7a81559e04
parentc74a420471fd693f89e0b0e19f93c88af22fb7de
Fix IPv6 sets nftables translation

The parser assumes the set is an IPv4 ipset because IPSET_OPT_FAMILY is
not set.

 # ipset-translate restore < ./ipset-mwan3_set_connected_ipv6.dump
 add table inet global
 add set inet global mwan3_connected_v6 { type ipv6_addr; flags interval; }
 flush set inet global mwan3_connected_v6
 ipset v7.15: Error in line 4: Syntax error: '64' is out of range 0-32

Remove ipset_xlate_type_get(), call ipset_xlate_set_get() instead to
obtain the set type and family.

Reported-by: Florian Eckert <fe@dev.tdt.de>
Fixes: 325af556cd3a ("add ipset to nftables translation infrastructure")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
lib/ipset.c
tests/xlate/xlate.t
tests/xlate/xlate.t.nft