| Message ID | 20211211185525.20527-1-jeremy@azazel.net |
|---|---|
| Headers | show |
| Series | inet reject statement fix | expand |
On Sat, Dec 11, 2021 at 06:55:22PM +0000, Jeremy Sowden wrote: > The first two patches contain small improvements that I noticed while > looking into a Debian bug-report. The third contains a fix for the > reported bug, that `inet` `reject` rules of the form: > > table inet filter { > chain input { > type filter hook input priority filter; > ether saddr aa:bb:cc:dd:ee:ff ip daddr 192.168.0.1 reject > } > } > > fail with: > > BUG: unsupported familynft: evaluate.c:2766:stmt_evaluate_reject_inet_family: Assertion `0' failed. > Aborted Series applied, thanks.
The first two patches contain small improvements that I noticed while looking into a Debian bug-report. The third contains a fix for the reported bug, that `inet` `reject` rules of the form: table inet filter { chain input { type filter hook input priority filter; ether saddr aa:bb:cc:dd:ee:ff ip daddr 192.168.0.1 reject } } fail with: BUG: unsupported familynft: evaluate.c:2766:stmt_evaluate_reject_inet_family: Assertion `0' failed. Aborted Here's the bug-report: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1001360 Jeremy Sowden (3): proto: short-circuit loops over upper protocols evaluate: correct typo's evaluate: reject: support ethernet as L2 protcol for inet table src/evaluate.c | 11 +++++++--- src/proto.c | 10 ++++++--- tests/py/inet/reject.t | 2 ++ tests/py/inet/reject.t.json | 34 +++++++++++++++++++++++++++++ tests/py/inet/reject.t.payload.inet | 10 +++++++++ 5 files changed, 61 insertions(+), 6 deletions(-)