path: root/src/netlink_delinearize.c
diff options
authorFlorian Westphal <>2017-02-28 00:59:07 +0100
committerPablo Neira Ayuso <>2017-02-28 00:59:42 +0100
commited66d9966294a3bab6c8611e369861ba57374743 (patch)
treeaa91c0359789cb81f82a9c06c7be160965ee01be /src/netlink_delinearize.c
parent2d09a04a12c8564f8044788b2e69da04671230d7 (diff)
src: support zone set statement with optional direction
nft automatically understands 'ct zone set 1' but when a direction is specified too we get a parser error since they are currently only allowed for plain ct expressions. This permits the existing syntax ('ct original zone') for all tokens with an optional direction also for set statements. Signed-off-by: Florian Westphal <> Signed-off-by: Pablo Neira Ayuso <>
Diffstat (limited to 'src/netlink_delinearize.c')
1 files changed, 5 insertions, 1 deletions
diff --git a/src/netlink_delinearize.c b/src/netlink_delinearize.c
index 57b8fa51..39347e01 100644
--- a/src/netlink_delinearize.c
+++ b/src/netlink_delinearize.c
@@ -659,6 +659,7 @@ static void netlink_parse_ct_stmt(struct netlink_parse_ctx *ctx,
uint32_t key;
struct stmt *stmt;
struct expr *expr;
+ int8_t dir = -1;
sreg = netlink_parse_register(nle, NFTNL_EXPR_CT_SREG);
expr = netlink_get_register(ctx, loc, sreg);
@@ -666,8 +667,11 @@ static void netlink_parse_ct_stmt(struct netlink_parse_ctx *ctx,
return netlink_error(ctx, loc,
"ct statement has no expression");
+ if (nftnl_expr_is_set(nle, NFTNL_EXPR_CT_DIR))
+ dir = nftnl_expr_get_u8(nle, NFTNL_EXPR_CT_DIR);
key = nftnl_expr_get_u32(nle, NFTNL_EXPR_CT_KEY);
- stmt = ct_stmt_alloc(loc, key, expr);
+ stmt = ct_stmt_alloc(loc, key, dir, expr);
expr_set_type(expr, stmt->ct.tmpl->dtype, stmt->ct.tmpl->byteorder);
ctx->stmt = stmt;