[Bug 936] frag: "more-fragments" and "reserved" are not identified by nftables

[bugzilla-daemon at netfilter.org]

https://bugzilla.netfilter.org/show_bug.cgi?id=936

Pablo Neira Ayuso <pablo at netfilter.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

--- Comment #1 from Pablo Neira Ayuso <pablo at netfilter.org> ---
Fixed by:

commit 45e5e4e92a2c882b22e95a807026611612d57729
Author: Florian Westphal <fw at strlen.de>
Date:   Wed Mar 2 13:56:43 2016 +0100

    netlink_delinearize: handle extension header templates with odd sizes

# nft --debug=netlink add rule ip6 x y frag more-fragments 1
ip6 x y 
  [ exthdr load 1b @ 44 + 3 => reg 1 ]
  [ bitwise reg 1 = (reg=1 & 0x00000001 ) ^ 0x00000000 ]
  [ cmp eq reg 1 0x00000001 ]

Closing.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20160513/00883966/attachment.html>