diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2023-02-02 21:47:56 +0100 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2023-11-02 11:56:19 +0100 |
| commit | bcfadb5c7446c38d196c611f1e1ac5564f5f922e (patch) | |
| tree | 0b7250523c12947ea98c67febacd7fd5da63f004 /src/netlink_delinearize.c | |
| parent | 2c76786b252dd5187bcd4729a3368b9d9fb27b4b (diff) | |
optimize: fix incorrect expansion into concatenation with verdict map
commit b691e2ea1d643adeb89c576a105f08cfff677cfb upstream.
# nft -c -o -f ruleset.nft
Merging:
ruleset.nft:3:3-53: meta pkttype broadcast udp dport { 67, 547 } accept
ruleset.nft:4:17-58: meta pkttype multicast udp dport 1900 drop
into:
meta pkttype . udp dport vmap { broadcast . { 67, 547 } : accept, multicast . 1900 : drop }
ruleset.nft:3:38-39: Error: invalid data type, expected concatenation of (packet type, internet network service)
meta pkttype broadcast udp dport { 67, 547 } accept
^^
Similar to 187c6d01d357 ("optimize: expand implicit set element when
merging into concatenation") but for verdict maps.
Reported-by: Simon G. Trajkovski <neur0armitage@proton.me>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'src/netlink_delinearize.c')
0 files changed, 0 insertions, 0 deletions