]> git.ipfire.org Git - thirdparty/nftables.git/commit
optimize: expand expression list when merging into concatenation
authorPablo Neira Ayuso <pablo@netfilter.org>
Tue, 1 Apr 2025 16:11:45 +0000 (18:11 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 1 Apr 2025 19:06:17 +0000 (21:06 +0200)
commit0d17d28bb06bf2a04862d5cd879a14bcb9a2d2dc
treeaa4c00216070e76f847a566548b932cea6677e5f
parent2412e760826f315ada984f7ee433a2077f180c8b
optimize: expand expression list when merging into concatenation

The following rules:

    udp dport 137 ct state new,untracked accept
    udp dport 138 ct state new,untracked accept

results in:

  nft: src/optimize.c:670: __merge_concat: Assertion `0' failed.

The logic to expand to the new,untracked list in the concatenation is
missing.

Fixes: 187c6d01d357 ("optimize: expand implicit set element when merging into concatenation")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
src/optimize.c
tests/shell/testcases/optimizations/dumps/merge_stmts_concat.json-nft
tests/shell/testcases/optimizations/dumps/merge_stmts_concat.nft
tests/shell/testcases/optimizations/merge_stmts_concat