]> git.ipfire.org Git - thirdparty/nftables.git/commit
projects / thirdparty / nftables.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e0c2211) | patch
evaluate: optimize zero length range
authorPablo Neira Ayuso <pablo@netfilter.org>
Fri, 21 Feb 2025 23:32:11 +0000 (00:32 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 25 Feb 2025 23:09:30 +0000 (00:09 +0100)
commitdeda274293f80f9718de4cbb416bd2b2bf296709
tree3b5534ae62ad38bf61909501c14fea8548ddc390tree | snapshot
parente0c221177e968337637b38054512f00031f4aa65commit | diff
evaluate: optimize zero length range

A rule like the following:

  ... tcp dport 22-22 ...

results in a range expression to match from 22 to 22.

Simplify to singleton value so a cmp is used instead.

This optimization already exists in set elements which might explain
this overlook.

Fixes: 7a6e16040d65 ("evaluate: allow for zero length ranges")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
src/evaluate.c diff | blob | blame | history
Mirror of git://git.netfilter.org/nftables