]> git.ipfire.org Git - thirdparty/nftables.git/commit
payload: do not kill dependency for proto_unknown
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 31 Oct 2022 10:35:31 +0000 (11:35 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 31 Oct 2022 11:51:10 +0000 (12:51 +0100)
commitc8a3c669499d169fef8c1e89b8d2d909e5ecd023
tree5d33dff7339153210f0364c61f452dfd30ab0f55
parentbdea233e6b5283ed48fd593a842b677b7833b892
payload: do not kill dependency for proto_unknown

Unsupported meta match on layer 4 protocol sets on protocol context to
proto_unknown, handle anything coming after it as a raw expression in
payload_expr_expand().

Moreover, payload_dependency_kill() skips dependency removal if protocol
is unknown, so raw payload expression leaves meta layer 4 protocol
remains in place.

Closes: https://bugzilla.netfilter.org/show_bug.cgi?id=1641
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
src/payload.c
tests/py/any/rawpayload.t
tests/py/any/rawpayload.t.json
tests/py/any/rawpayload.t.payload