]> git.ipfire.org Git - thirdparty/nftables.git/commit
projects / thirdparty / nftables.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: df6f2d9) | patch
src: BASECHAIN flag no longer implies presence of priority expression
authorFlorian Westphal <fw@strlen.de>
Thu, 12 Jun 2025 18:17:15 +0000 (20:17 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 13 Aug 2025 18:43:14 +0000 (20:43 +0200)
commit10da83c6d02318160ac561dd08fbf153d19cc407
treee4c8bf102c0d07ba41ec3e07f16101ab3f6785b5tree | snapshot
parentdf6f2d9308762e4c14612dc83240de551ea97fd1commit | diff
src: BASECHAIN flag no longer implies presence of priority expression

commit 44ea1936463728475768861073ca4ba34a5c2f75 upstream.

The included bogon will crash nft because print side assumes that BASECHAIN
flag presence also means that priority expression is available.

Make the print side conditional.

Fixes: a66b5ad9540d ("src: allow for updating devices on existing netdev chain")
Suggested-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Florian Westphal <fw@strlen.de>
src/rule.c diff | blob | blame | history
tests/shell/testcases/bogons/nft-f/null_ingress_type_crash [new file with mode: 0644] blob
Mirror of git://git.netfilter.org/nftables