[PATCH nft 0/2] evaluate: add more checks for '... set 1-3'

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Only a few statements can accept expressions with ranges, all others
will trigger an assertion in the netlink linearization path.

Add missing checks and fix the existing tproxy ones.

Florian Westphal (2):
  evaluate: tproxy: move range error checks after arg evaluation
  evaluate: add missing range checks for dup,fwd and payload statements

 src/evaluate.c                                | 100 ++++++++++--------
 .../testcases/bogons/nft-f/dup_fwd_ranges     |  14 +++
 .../testcases/bogons/nft-f/tproxy_ranges      |   8 ++
 .../nft-f/unknown_expr_type_range_assert      |   8 +-
 4 files changed, 83 insertions(+), 47 deletions(-)
 create mode 100644 tests/shell/testcases/bogons/nft-f/dup_fwd_ranges
 create mode 100644 tests/shell/testcases/bogons/nft-f/tproxy_ranges

-- 
2.41.0





[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux