diff options
authorFlorian Westphal <>2018-06-12 18:39:13 +0200
committerFlorian Westphal <>2018-06-12 18:43:00 +0200
commitbbbed9f3175c5260332ae7e6800b3a6791418fd2 (patch)
parent872f373dc50f702d0956b61ddebe2357cdf04543 (diff)
datatype: add stolen verdict
using fwd statement causes crash when using nft trace: trace id ddbbaae2 netdev vpn ingress_out packet: iif "enp2s0" ether saddr 78:54:00:29:bb:aa ether daddr 52:54:00:01:53:9f ip saddr ip daddr ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 49036 ip length 84 icmp type echo-reply icmp code 0 icmp id 16947 icmp sequence 4 trace id ddbbaae2 netdev vpn ingress_out rule ip saddr nftrace set 1 (verdict continue) trace id ddbbaae2 netdev vpn ingress_out rule ip saddr ether saddr set aa:bb:00:18:cc:dd ether daddr set 00:00:5e:00:00:11 fwd to "enp1s0" BUG: invalid verdict value 2 nft: datatype.c:282: verdict_type_print: Assertion `0' failed. ADd stolen verdict (2) and remove the BUG statement. Closes: Signed-off-by: Florian Westphal <>
1 files changed, 5 insertions, 1 deletions
diff --git a/src/datatype.c b/src/datatype.c
index c77d228e..20904453 100644
--- a/src/datatype.c
+++ b/src/datatype.c
@@ -280,8 +280,12 @@ static void verdict_type_print(const struct expr *expr, struct output_ctx *octx)
case NF_QUEUE:
nft_print(octx, "queue");
+ case NF_STOLEN:
+ nft_print(octx, "stolen");
+ break;
- BUG("invalid verdict value %u\n", expr->verdict);
+ nft_print(octx, "unknown verdict value %u", expr->verdict);
+ break;