The first patch is actually a generic libnftables fix, it prevents a segfault when reporting parser errors. The remaining fixes were found when trying to parse a ruleset prepared by firewalld (JSON API usage is WiP there). Seems like increasing test coverage really is in order. Phil Sutter (5): libnftables: Print errors before freeing commands parser_json: Duplicate chain name when parsing jump verdict parser_json: Use xstrdup() when parsing rule comment json: Fix memleaks in echo support parser_json: Respect base chain priority src/libnftables.c | 4 ++-- src/parser_json.c | 34 ++++++++++++++++++++++------------ 2 files changed, 24 insertions(+), 14 deletions(-) -- 2.20.1
