This patchset makes parsing and evaluation of sets and set elements more robust. See individual patches and the included bogus-input-tests for details. Florian Westphal (3): intervals: allow low-level interval code to return errors src: do not merge a set with a erroneous one evaluate: don't assert if set->data is NULL include/rule.h | 2 + src/evaluate.c | 31 +++++++++- src/intervals.c | 62 ++++++++++++++----- .../expr_evaluate_mapping_no_data_assert | 4 ++ .../nft-f/invalid_range_expr_type_binop | 12 ++++ .../bogons/nft-f/unhandled_key_type_13_assert | 5 ++ 6 files changed, 99 insertions(+), 17 deletions(-) create mode 100644 tests/shell/testcases/bogons/nft-f/expr_evaluate_mapping_no_data_assert create mode 100644 tests/shell/testcases/bogons/nft-f/invalid_range_expr_type_binop create mode 100644 tests/shell/testcases/bogons/nft-f/unhandled_key_type_13_assert -- 2.41.0