[Bug 888] New: Assertion errors attempting a statement which (I believe) is grammatically correct.

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Sat Jan 25 02:17:41 CET 2014


https://bugzilla.netfilter.org/show_bug.cgi?id=888

           Summary: Assertion errors attempting a statement which (I
                    believe) is grammatically correct.
           Product: nftables
           Version: unspecified
          Platform: x86_64
        OS/Version: Fedora
            Status: NEW
          Severity: normal
          Priority: P5
         Component: nft
        AssignedTo: pablo at netfilter.org
        ReportedBy: deleriux1 at gmail.com
   Estimated Hours: 0.0


The following expression does not work on the set. From what I've seen from the
bison grammer file this appears to be valid syntax.. this rule works using a
singleton, but declaring it an anonymous set does not.


<some basic table initialization..>
nft> add rule ip filter input ip saddr != { 192.168.1.0/24 } reject
BUG: invalid expression type set
nft: src/evaluate.c:955: expr_evaluate_relational: Assertion `0' failed.
Aborted


Additionally the following also fails; From looking at the source there does
not appear to be a set type declared for network blocks and seeing that this
works when declared inline as an anonymous set I imagine this behaviour is not
desirable.

<some basic table initialization..>
nft> add map filter admin_addresses { type ipv4_address; }
nft> add element filter admin_addresses { 192.168.1.0/24 }
nft: src/netlink.c:155: alloc_nft_setelem: Assertion `expr->ops->type ==
EXPR_MAPPING' failed.
Aborted

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.



More information about the netfilter-buglog mailing list