[Bug 1403] New: Timeout object with invalid time unit crashes nft

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Sat Feb 1 23:26:39 CET 2020


https://bugzilla.netfilter.org/show_bug.cgi?id=1403

            Bug ID: 1403
           Summary: Timeout object with invalid time unit crashes nft
           Product: nftables
           Version: unspecified
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: P5
         Component: nft
          Assignee: pablo at netfilter.org
          Reporter: kfm at plushkava.net

Saving the following to a file then testing with nft -c -f causes a
segmentation fault.

table ip filter {
        ct timeout mytimeout {
                protocol tcp;
                policy = { established: 2h }
        }
}

As I quickly realised, "h" cannot be specified as a unit of time here. Still,
it should not crash. I can reproduce this in both Arch and Gentoo Linux with
the latest formal releases of nftables and its supporting libraries. Let me
know if not reproducible on your side; I shall provide more details in that
case.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200201/4d9f3005/attachment.html>


More information about the netfilter-buglog mailing list