Hi Phil, > > Could you please try with current HEAD of iptables? I think the bug you > see was fixed by commit 2026b08bce7fe ("nft: ruleparse: Add missing > braces around ternary"). At least I don't see a problem in > testcases/iptables/0002-verbose-output_0 when testing with either > valgrind or ASAN. > I was unable to build from master due to some other issue, but I applied this patch to 1.8.10 and now all the tests that were failing with segfaults are working... Many thanks for your quick response. Have a nice weekend! Cheers, Josh