diff options
| author | Phil Sutter <phil@nwl.cc> | 2019-11-12 20:00:15 +0100 |
|---|---|---|
| committer | Phil Sutter <phil@nwl.cc> | 2019-11-14 11:55:59 +0100 |
| commit | decc12ec2dc319a9bb1fb5f629258c6c3a087db1 (patch) | |
| tree | fed83acb56e111b8e4acd98edbcf5e95985d79bc /src/payload.c | |
| parent | ead5aaf4fed074f126ab1b32536e234bf6bf2276 (diff) | |
segtree: Check ranges when deleting elements
Make sure any intervals to delete actually exist, otherwise reject the
command. Without this, it is possible to mess up rbtree contents:
| # nft list ruleset
| table ip t {
| set s {
| type ipv4_addr
| flags interval
| auto-merge
| elements = { 192.168.1.0-192.168.1.254, 192.168.1.255 }
| }
| }
| # nft delete element t s '{ 192.168.1.0/24 }'
| # nft list ruleset
| table ip t {
| set s {
| type ipv4_addr
| flags interval
| auto-merge
| elements = { 192.168.1.255-255.255.255.255 }
| }
| }
Signed-off-by: Phil Sutter <phil@nwl.cc>
Acked-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'src/payload.c')
0 files changed, 0 insertions, 0 deletions