]> git.ipfire.org Git - thirdparty/iptables.git/commit
nft-ruleparse: Fallback to compat expressions in userdata
authorPhil Sutter <phil@nwl.cc>
Fri, 4 Oct 2024 19:23:25 +0000 (21:23 +0200)
committerPhil Sutter <phil@nwl.cc>
Thu, 10 Apr 2025 16:45:45 +0000 (18:45 +0200)
commitff5f6a208efccd4e2bd8d4fdaf5d284ce54ff69e
tree61dc0b52d8e7812eabb044719b7f4e9a1c2074e1
parentf6f0f4f55794a5f1add6f728f80f29f12f36ecd5
nft-ruleparse: Fallback to compat expressions in userdata

If parsing of a rule fails (e.g. due to an unknown native expression),
check if userdata contains a UDATA_TYPE_COMPAT_EXT attribute and retry
parsing the rule preferring the contained extensions instead of native
expressions.

Signed-off-by: Phil Sutter <phil@nwl.cc>
configure.ac
iptables/Makefile.am
iptables/nft-compat.c [new file with mode: 0644]
iptables/nft-compat.h [new file with mode: 0644]
iptables/nft-ruleparse.c