From b73298405cda74b3a87a1818bb92f53298d34170 Mon Sep 17 00:00:00 2001 From: Florian Westphal Date: Mon, 15 Jan 2024 14:27:15 +0100 Subject: rule: fix sym refcount assertion Scope release must happen last. afl provided a reproducer where policy is a define, because scope is released too early we get: nft: src/rule.c:559: scope_release: Assertion `sym->refcnt == 1' failed. ... because chain->policy is EXPR_SYMBOL. Fixes: 627c451b2351 ("src: allow variables in the chain priority specification") Signed-off-by: Florian Westphal --- tests/shell/testcases/bogons/nft-f/define_policy_assert | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 tests/shell/testcases/bogons/nft-f/define_policy_assert (limited to 'tests/shell/testcases/bogons/nft-f/define_policy_assert') diff --git a/tests/shell/testcases/bogons/nft-f/define_policy_assert b/tests/shell/testcases/bogons/nft-f/define_policy_assert new file mode 100644 index 00000000..f1e58b55 --- /dev/null +++ b/tests/shell/testcases/bogons/nft-f/define_policy_assert @@ -0,0 +1,3 @@ +chain y x { priority filter +define p = foo +policy $p -- cgit v1.2.3