On Tue, Dec 07, 2021 at 04:16:55PM +0100, Florian Westphal wrote:
> This series makes typeof-sets work in corner cases such as
>
> set s4 { typeof frag frag-off }
> set s8 { typeof ip version }
>
> frag frag-off @s4 accept
> ip version @s8
>
> Due to the shift/mask expressions needed to cope with these
> delinearization can't figure out the correct payload/exthdr templates
> and nft lists this as:
>
> (frag unknown & 0xfff8 [invalid type]) >> 3 == @s4
> (ip l4proto & pfsync) >> 4 == @s8
>
> With this series, the mask/shift expressions are removed and
> nft can print them in a readable way.
LGTM, thanks
