diff mbox series

[nft] scanner: Support rfc4291 IPv4-compatible addresses

Message ID 20180505124453.32713-1-phil@nwl.cc
State Accepted
Delegated to: Pablo Neira
Headers show
Series [nft] scanner: Support rfc4291 IPv4-compatible addresses | expand

Commit Message

Phil Sutter May 5, 2018, 12:44 p.m. UTC
These are defined in section 2.5.5.1. Although it is stated that they
are deprecated and new implementations are not required to support them,
they occur in ruleset output if an address in the form '::feed:babe' was
given in input. In order to support reinsertion of that rule, we have to
support those deprecated addresses as well.

Signed-off-by: Phil Sutter <phil@nwl.cc>
---
 src/scanner.l | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

Comments

Pablo Neira Ayuso May 6, 2018, 9:10 p.m. UTC | #1
On Sat, May 05, 2018 at 02:44:53PM +0200, Phil Sutter wrote:
> These are defined in section 2.5.5.1. Although it is stated that they
> are deprecated and new implementations are not required to support them,
> they occur in ruleset output if an address in the form '::feed:babe' was
> given in input. In order to support reinsertion of that rule, we have to
> support those deprecated addresses as well.

Applied, thanks.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
diff mbox series

Patch

diff --git a/src/scanner.l b/src/scanner.l
index 5f21bfd7e5e1f..70366d1930351 100644
--- a/src/scanner.l
+++ b/src/scanner.l
@@ -158,10 +158,11 @@  v632		((({hex4}:){2})((:{hex4}){1}))
 v633		((({hex4}:){3})(:))
 v63		({v630}|{v631}|{v632}|{v633})
 v620		((:)((:{hex4}){2}))
+v620_rfc4291	((:)(:{ip4addr}))
 v621		((({hex4}:){1})((:{hex4}){1}))
 v622		((({hex4}:){2})(:))
 v62_rfc4291	((:)(:[fF]{4})(:{ip4addr}))
-v62		({v620}|{v621}|{v622}|{v62_rfc4291})
+v62		({v620}|{v621}|{v622}|{v62_rfc4291}|{v620_rfc4291})
 v610		((:)(:{hex4}{1}))
 v611		((({hex4}:){1})(:))
 v61		({v610}|{v611})