Re: [iptables PATCH v3] xtables: Fix for false-positive rule matching

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Phil Sutter <phil@xxxxxx> wrote:
> The above change clashes with ebtables-nft's reuse of target objects:
> While input parsing still just assigns the object from xtables_targets
> list, rule conversion from nftnl to iptables_command_state allocates new
> data. To fix this, make ebtables-nft input parsing use the common
> command_jump() routine instead of its own simplified copy. In turn, this
> also eliminates the ebtables-nft-specific variants of parse_target(),
> though with a slight change of behaviour: Names of user-defined chains
> are no longer allowed to contain up to 31 but merely 28 characters.

I'm fine with that given we re-use libxtables now, thus applied.



[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux