[Bug 897] New: Numbers of caracter in the name of set.

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Wed Feb 5 19:53:47 CET 2014


https://bugzilla.netfilter.org/show_bug.cgi?id=897

           Summary: Numbers of caracter in the name of set.
           Product: nftables
           Version: unspecified
          Platform: x86_64
        OS/Version: Debian GNU/Linux
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: nft
        AssignedTo: pablo at netfilter.org
        ReportedBy: anarey.spam at gmail.com
   Estimated Hours: 0.0


You can add a set with a long name (16 or more characters) but "nft" remanes it
to another name with 15 characters without showing a error message.

thenameofthissetistoolong (25 characters) => thenameofthisse (15 characters)(It
is not OK)
thisnamewith0016 (16 characters)=> thisnamewith001 (15 characters) (It is not
OK)

thisnamewith015 (15 characters)=> thisnamewith015 (15 characters)(It's OK)

You can reproduce this bug by following these steps:

$ sudo nft add table ip test
$ sudo nft add chain ip test filter {type filter hook input priority 0 \; }
$ sudo nft add set ip test thenameofthissetistoolong { type ipv4_address\;}
$ sudo nft add set ip test thisnamewith015 { type ipv4_address\;}
$ sudo nft add set ip test thisnamewith0016 { type ipv4_address\;}
$ sudo nft list table ip test
table ip test {
    set thenameofthisse {
        type ipv4_address
    }

    set thisnamewith015 {
        type ipv4_address
    }

    set thisnamewith001 {
        type ipv4_address
    }

    chain filter {
         type filter hook input priority 0;
    }
}

I can always reproduce this bug.

The last commit in libmnl repo is "090a842 examples: use mnl_socket_setsockopt"
The last commit in libnftnl repo is "076fd1e include: add cached copy of
linux/kernel.h"
The last commit in nftables repo is 11ba325 bump release number to 0.100

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.



More information about the netfilter-buglog mailing list