diff options
| author | Florian Westphal <fw@strlen.de> | 2021-02-01 22:08:54 +0100 |
|---|---|---|
| committer | Florian Westphal <fw@strlen.de> | 2021-02-02 16:33:03 +0100 |
| commit | 533565244d88a818d8828ebabd7625e5a8a4c374 (patch) | |
| tree | 623d6a81791c8ec4bdbb42bc3339f3714958e7f3 /tests/py/inet/reject.t.json.output | |
| parent | 3eb14fd93093c5e084d3ac1c4b0171cf80fb264f (diff) | |
payload: check icmp dependency before removing previous icmp expression
nft is too greedy when removing icmp dependencies.
'icmp code 1 type 2' did remove the type when printing.
Be more careful and check that the icmp type dependency of the
candidate expression (earlier icmp payload expression) has the same
type dependency as the new expression.
Reported-by: Eric Garver <eric@garver.life>
Reported-by: Michael Biebl <biebl@debian.org>
Tested-by: Eric Garver <eric@garver.life>
Fixes: d0f3b9eaab8d77e ("payload: auto-remove simple icmp/icmpv6 dependency expressions")
Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'tests/py/inet/reject.t.json.output')
0 files changed, 0 insertions, 0 deletions