auto-merge is only available to interval sets with one value only,
untoggle this flag. Later, this can be hardened to reject it.
Fixes: 30f667920601 ("src: add 'auto-merge' option to sets")
Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
---
src/evaluate.c | 3 +++
1 file changed, 3 insertions(+)
diff --git a/src/evaluate.c b/src/evaluate.c
index 812505868dd1..f5838df650b5 100644
--- a/src/evaluate.c
+++ b/src/evaluate.c
@@ -5041,6 +5041,9 @@ static int set_evaluate(struct eval_ctx *ctx, struct set *set)
sizeof(set->desc.field_len));
set->desc.field_count = set->key->field_count;
set->flags |= NFT_SET_CONCAT;
+
+ if (set->automerge)
+ set->automerge = false;
}
if (set_is_anonymous(set->flags) && set->key->etype == EXPR_CONCAT) {
--
2.30.2
