From a3ebc989d32e880ba19dae62db1f1164a9402ee2 Mon Sep 17 00:00:00 2001 From: Pablo Neira Ayuso Date: Fri, 21 Oct 2016 11:17:55 +0100 Subject: parser_bison: allow to use variable to add/create/delete elements Using variable definitions from element command doesn't work, eg. -test.nft- define whitelist_v4 = { 1.1.1.1 } table inet filter { set whitelist_v4 { type ipv4_addr; } } add element inet filter whitelist_v4 $whitelist_v4 -EOF- # nft -f test.nft test.nft:7:38-38: Error: syntax error, unexpected '$', expecting '{' add element inet filter whitelist_v4 $whitelist_v4 ^ Fix this by using set_block_expr rule for every element command. This patch also comes with a new regression test. Reported-by: Leon Merten Lohse Signed-off-by: Pablo Neira Ayuso --- tests/shell/testcases/nft-f/0010variable_0 | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) create mode 100755 tests/shell/testcases/nft-f/0010variable_0 (limited to 'tests/shell/testcases') diff --git a/tests/shell/testcases/nft-f/0010variable_0 b/tests/shell/testcases/nft-f/0010variable_0 new file mode 100755 index 00000000..2df71b13 --- /dev/null +++ b/tests/shell/testcases/nft-f/0010variable_0 @@ -0,0 +1,22 @@ +#!/bin/bash + +set -e + +tmpfile=$(mktemp) +if [ ! -w $tmpfile ] ; then + echo "Failed to create tmp file" >&2 + exit 0 +fi + +trap "rm -rf $tmpfile" EXIT # cleanup if aborted + +RULESET="define whitelist_v4 = { 1.1.1.1 } + +table inet filter { + set whitelist_v4 { type ipv4_addr; } +} +add element inet filter whitelist_v4 \$whitelist_v4 +" + +echo "$RULESET" > $tmpfile +$NFT -f $tmpfile -- cgit v1.2.3