]> git.ipfire.org Git - thirdparty/nftables.git/commit
src: BASECHAIN flag no longer implies presence of priority expression
authorFlorian Westphal <fw@strlen.de>
Thu, 12 Jun 2025 18:17:15 +0000 (20:17 +0200)
committerFlorian Westphal <fw@strlen.de>
Sun, 22 Jun 2025 17:35:14 +0000 (19:35 +0200)
commit44ea1936463728475768861073ca4ba34a5c2f75
tree693f05964e9935f5ae75926675d128ff07f68cd4
parent3cec07327ea2b91ac8395e0c0ee2a635a5e9fcd5
src: BASECHAIN flag no longer implies presence of priority expression

The included bogon will crash nft because print side assumes that BASECHAIN
flag presence also means that priority expression is available.

Make the print side conditional.

Fixes: a66b5ad9540d ("src: allow for updating devices on existing netdev chain")
Suggested-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Florian Westphal <fw@strlen.de>
src/rule.c
tests/shell/testcases/bogons/nft-f/null_ingress_type_crash [new file with mode: 0644]