[Bug 1444] nftables-0.9.6 crashes on some set notations:

[bugzilla-daemon at netfilter.org]

https://bugzilla.netfilter.org/show_bug.cgi?id=1444

--- Comment #1 from Sergei Trofimovich <slyfox at inbox.ru> ---
valgrind also reports first out-of-bounds read in the same backtrace:

==80425== Invalid read of size 1
==80425==    at 0x486BFE2: expr_ops (expression.c:1366)
==80425==    by 0x48693A7: expr_print (expression.c:101)
==80425==    by 0x486B84E: set_ref_expr_print (expression.c:1195)
==80425==    by 0x48693D0: expr_print (expression.c:104)
==80425==    by 0x486A5D3: binop_arg_print (expression.c:612)
==80425==    by 0x486A72B: binop_expr_print (expression.c:637)
==80425==    by 0x48693D0: expr_print (expression.c:104)
==80425==    by 0x48634DF: expr_stmt_print (statement.c:72)
==80425==    by 0x485C5DA: rule_print (rule.c:655)
==80425==    by 0x485DABF: chain_print (rule.c:1221)
==80425==    by 0x485E50D: table_print (rule.c:1387)
==80425==    by 0x485F980: do_list_table (rule.c:1770)
==80425==    by 0x4861CE2: do_list_ruleset (rule.c:2405)
==80425==    by 0x4862288: do_command_list (rule.c:2527)
==80425==    by 0x4862BC3: do_command (rule.c:2753)
==80425==    by 0x489FAF4: nft_netlink (libnftables.c:42)
==80425==    by 0x48A0C80: nft_run_cmd_from_filename (libnftables.c:512)
==80425==    by 0x10AF40: main (main.c:459)
==80425==  Address 0x49 is not stack'd, malloc'd or (recently) free'd

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200719/2ea285c6/attachment-0001.html>