Only a few statements can accept expressions with ranges, all others will trigger an assertion in the netlink linearization path. Add missing checks and fix the existing tproxy ones. Florian Westphal (2): evaluate: tproxy: move range error checks after arg evaluation evaluate: add missing range checks for dup,fwd and payload statements src/evaluate.c | 100 ++++++++++-------- .../testcases/bogons/nft-f/dup_fwd_ranges | 14 +++ .../testcases/bogons/nft-f/tproxy_ranges | 8 ++ .../nft-f/unknown_expr_type_range_assert | 8 +- 4 files changed, 83 insertions(+), 47 deletions(-) create mode 100644 tests/shell/testcases/bogons/nft-f/dup_fwd_ranges create mode 100644 tests/shell/testcases/bogons/nft-f/tproxy_ranges -- 2.41.0