]> git.ipfire.org Git - thirdparty/nftables.git/commit
evaluate: reject tunnel section if another one is already present
authorFlorian Westphal <fw@strlen.de>
Thu, 16 Oct 2025 14:59:36 +0000 (16:59 +0200)
committerFlorian Westphal <fw@strlen.de>
Fri, 17 Oct 2025 07:41:56 +0000 (09:41 +0200)
commite0fe015343ff77d9176563479934b7c4e9a4683a
treeee75dc02a63a50f35daf4e904826c4fe8bac0277
parentfb3e048171fe09c347c43398a779180717818466
evaluate: reject tunnel section if another one is already present

Included bogon causes a crash because the list head isn't initialised
due to tunnel->type == VXLAN.

Signed-off-by: Florian Westphal <fw@strlen.de>
Reviewed-by: Fernando Fernandez Mancera <fmancera@suse.de>
src/parser_bison.y
tests/shell/testcases/bogons/nft-f/tunnel_in_tunnel_crash [new file with mode: 0644]