Hi, It seems there is a segfault in nft. How to reproduce: % nft add rule inet filter ct state established,related accept ==28442== Jump to the invalid address stated on the next line ==28442== at 0x0: ??? ==28442== by 0x4099EA: symbolic_constant_parse (datatype.c:133) ==28442== by 0x40BFD8: expr_evaluate (evaluate.c:199) ==28442== by 0x40D524: list_member_evaluate (evaluate.c:597) ==28442== by 0x40C25B: expr_evaluate (evaluate.c:649) ==28442== by 0x40C103: expr_evaluate (evaluate.c:879) ==28442== by 0x40D908: stmt_evaluate (evaluate.c:1103) ==28442== by 0x40DF27: rule_evaluate (evaluate.c:1727) ==28442== by 0x40E0A6: chain_evaluate (evaluate.c:1788) ==28442== by 0x40E4CE: cmd_evaluate (evaluate.c:1807) ==28442== by 0x423757: nft_parse (parser_bison.y:549) ==28442== by 0x4061CC: nft_run (main.c:231) ==28442== Address 0x0 is not stack'd, malloc'd or (recently) free'd ==28442== ==28442== ==28442== Process terminating with default action of signal 11 (SIGSEGV) ==28442== Bad permissions for mapped region at address 0x0 ==28442== at 0x0: ??? ==28442== by 0x4099EA: symbolic_constant_parse (datatype.c:133) ==28442== by 0x40BFD8: expr_evaluate (evaluate.c:199) ==28442== by 0x40D524: list_member_evaluate (evaluate.c:597) ==28442== by 0x40C25B: expr_evaluate (evaluate.c:649) ==28442== by 0x40C103: expr_evaluate (evaluate.c:879) ==28442== by 0x40D908: stmt_evaluate (evaluate.c:1103) ==28442== by 0x40DF27: rule_evaluate (evaluate.c:1727) ==28442== by 0x40E0A6: chain_evaluate (evaluate.c:1788) ==28442== by 0x40E4CE: cmd_evaluate (evaluate.c:1807) ==28442== by 0x423757: nft_parse (parser_bison.y:549) ==28442== by 0x4061CC: nft_run (main.c:231) ==28442== As far as I've investigated, it seems the bitmask datatype is missing somehow the parse() function. My HEAD is cf1e7d4 (netlink: don't bug on unknown events). regards. -- Arturo Borrero González -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
