thr3ads.net - netfilter buglog - [Bug 898] New: You can not add a non-name set with more than 255 elements aprox. Do not show any error. [Feb 2014]

If this information is useful, please help other people find it:
Share via:

bugzilla-daemon at netfilter.org

2014-Feb-05 18:56 UTC

[Bug 898] New: You can not add a non-name set with more than 255 elements aprox. Do not show any error.

https://bugzilla.netfilter.org/show_bug.cgi?id=898

           Summary: You can not add a non-name set with more than 255
                    elements aprox. Do not show any error.
           Product: nftables
           Version: unspecified
          Platform: x86_64
        OS/Version: Debian GNU/Linux
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: nft
        AssignedTo: pablo at netfilter.org
        ReportedBy: anarey.spam at gmail.com
   Estimated Hours: 0.0


You can add a non-name set with 250 elements. All is ok

 $ sudo nft add table ip test-1
 $ sudo sudo nft add chain ip test-1 input250 { type filter hook input priority
0 \; }

 $ sudo nft add rule ip test-1 input250 ip saddr { 127.2.2.201, 127.2.2.200,
127.2.2.199, 127.2.2.198, 127.2.2.197, 127.2.2.196, 127.2.2.195, 127.2.2.194,
127.2.2.193, 127.2.2.192, 127.2.2.191, 127.2.2.190, 127.2.2.189, 127.2.2.188,
127.2.2.187, 127.2.2.186, 127.2.2.185, 127.2.2.184, 127.2.2.183, 127.2.2.182,
127.2.2.181, 127.2.2.180, 127.2.2.179, 127.2.2.178, 127.2.2.177, 127.2.2.176,
127.2.2.175, 127.2.2.174, 127.2.2.173, 127.2.2.172, 127.2.2.171, 127.2.2.170,
127.2.2.169, 127.2.2.168, 127.2.2.167, 127.2.2.166, 127.2.2.165, 127.2.2.164,
127.2.2.163, 127.2.2.162, 127.2.2.161, 127.2.2.160, 127.2.2.159, 127.2.2.158,
127.2.2.157, 127.2.2.156, 127.2.2.155, 127.2.2.154, 127.2.2.153, 127.2.2.152,
127.2.2.151, 127.2.2.150, 127.2.2.149, 127.2.2.148, 127.2.2.147, 127.2.2.146,
127.2.2.145, 127.2.2.144, 127.2.2.143, 127.2.2.142, 127.2.2.141, 127.2.2.140,
127.2.2.139, 127.2.2.138, 127.2.2.137, 127.2.2.136, 127.2.2.135, 127.2.2.134,
127.2.2.133, 127.2.2.132, 127.2.2.131, 127.2.2.130, 127.2.2.129, 127.2.2.128,
127.2.2.127, 127.2.2.126, 127.2.2.125, 127.2.2.124, 127.2.2.123, 127.2.2.122,
127.2.2.121, 127.2.2.120, 127.2.2.119, 127.2.2.118, 127.2.2.117, 127.2.2.116,
127.2.2.115, 127.2.2.114, 127.2.2.113, 127.2.2.112, 127.2.2.111, 127.2.2.110,
127.2.2.109, 127.2.2.108, 127.2.2.107, 127.2.2.106, 127.2.2.105, 127.2.2.104,
127.2.2.103, 127.2.2.102, 127.2.2.101, 127.2.2.100, 127.2.2.99, 127.2.2.98,
127.2.2.97, 127.2.2.96, 127.2.2.95, 127.2.2.94, 127.2.2.93, 127.2.2.92,
127.2.2.91, 127.2.2.90, 127.2.2.89, 127.2.2.88, 127.2.2.87, 127.2.2.86,
127.2.2.85, 127.2.2.84, 127.2.2.83, 127.2.2.82, 127.2.2.81, 127.2.2.80,
127.2.2.79, 127.2.2.78, 127.2.2.77, 127.2.2.76, 127.2.2.75, 127.2.2.74,
127.2.2.73, 127.2.2.72, 127.2.2.71, 127.2.2.70, 127.2.2.69, 127.2.2.68,
127.2.2.67, 127.2.2.66, 127.2.2.65, 127.2.2.64, 127.2.2.63, 127.2.2.62,
127.2.2.61, 127.2.2.60, 127.2.2.59, 127.2.2.58, 127.2.2.57, 127.2.2.56,
127.2.2.55, 127.2.2.54, 127.2.2.53, 127.2.2.52, 127.2.2.51, 127.2.2.50,
127.2.2.49, 127.2.2.48, 127.2.2.47, 127.2.2.46, 127.2.2.45, 127.2.2.44,
127.2.2.43, 127.2.2.42, 127.2.2.41, 127.2.2.40, 127.2.2.39, 127.2.2.38,
127.2.2.37, 127.2.2.36, 127.2.2.35, 127.2.2.34, 127.2.2.33, 127.2.2.32,
127.2.2.31, 127.2.2.30, 127.2.2.29, 127.2.2.28, 127.2.2.27, 127.2.2.26,
127.2.2.25, 127.2.2.24, 127.2.2.23, 127.2.2.22, 127.2.2.21, 127.2.2.20,
127.2.2.19, 127.2.2.18, 127.2.2.17, 127.2.2.16, 127.2.2.15, 127.2.2.14,
127.2.2.13, 127.2.2.12, 127.2.2.11, 127.2.2.10, 127.2.2.9, 127.2.2.8,
127.2.2.7, 127.2.2.6, 127.2.2.5, 127.2.2.4, 127.2.2.3, 127.2.2.2,  127.2.2.202,
127.2.2.203, 127.2.2.204, 127.2.2.205, 127.2.2.206, 127.2.2.207, 127.2.2.208,
127.2.2.209, 127.2.2.210, 127.2.2.211, 127.2.2.212, 127.2.2.213, 127.2.2.214,
127.2.2.215, 127.2.2.216, 127.2.2.217, 127.2.2.218, 127.2.2.219, 127.2.2.220,
127.2.2.221, 127.2.2.222, 127.2.2.223, 127.2.2.224, 127.2.2.225, 127.2.2.226,
127.2.2.227, 127.2.2.228, 127.2.2.229, 127.2.2.230, 127.2.2.231, 127.2.2.232,
127.2.2.233, 127.2.2.234, 127.2.2.235, 127.2.2.236, 127.2.2.237, 127.2.2.238,
127.2.2.239, 127.2.2.240, 127.2.2.241, 127.2.2.242, 127.2.2.243, 127.2.2.244,
127.2.2.245, 127.2.2.246, 127.2.2.247, 127.2.2.248, 127.2.2.249, 127.2.2.250,
127.2.2.251} accept
 $ sudo nft -nna list table ip test-1
table ip test-1 {
    chain input250 {
         type filter hook input priority 0;
         ip saddr { 127.2.2.251, 127.2.2.250, 127.2.2.249, 127.2.2.248,
127.2.2.247, 127.2.2.246, 127.2.2.245, 127.2.2.244, 127.2.2.243, 127.2.2.242,
127.2.2.241, 127.2.2.240, 127.2.2.239, 127.2.2.238, 127.2.2.237, 127.2.2.236,
127.2.2.235, 127.2.2.234, 127.2.2.233, 127.2.2.232, 127.2.2.231, 127.2.2.230,
127.2.2.229, 127.2.2.228, 127.2.2.227, 127.2.2.226, 127.2.2.225, 127.2.2.224,
127.2.2.223, 127.2.2.222, 127.2.2.221, 127.2.2.220, 127.2.2.219, 127.2.2.218,
127.2.2.217, 127.2.2.216, 127.2.2.215, 127.2.2.214, 127.2.2.213, 127.2.2.212,
127.2.2.211, 127.2.2.210, 127.2.2.209, 127.2.2.208, 127.2.2.207, 127.2.2.206,
127.2.2.205, 127.2.2.204, 127.2.2.203, 127.2.2.202, 127.2.2.201, 127.2.2.200,
127.2.2.199, 127.2.2.198, 127.2.2.197, 127.2.2.196, 127.2.2.195, 127.2.2.194,
127.2.2.193, 127.2.2.192, 127.2.2.191, 127.2.2.190, 127.2.2.189, 127.2.2.188,
127.2.2.187, 127.2.2.186, 127.2.2.185, 127.2.2.184, 127.2.2.183, 127.2.2.182,
127.2.2.181, 127.2.2.180, 127.2.2.179, 127.2.2.178, 127.2.2.177, 127.2.2.176,
127.2.2.175, 127.2.2.174, 127.2.2.173, 127.2.2.172, 127.2.2.171, 127.2.2.170,
127.2.2.169, 127.2.2.168, 127.2.2.167, 127.2.2.166, 127.2.2.165, 127.2.2.164,
127.2.2.163, 127.2.2.162, 127.2.2.161, 127.2.2.160, 127.2.2.159, 127.2.2.158,
127.2.2.157, 127.2.2.156, 127.2.2.155, 127.2.2.154, 127.2.2.153, 127.2.2.152,
127.2.2.151, 127.2.2.150, 127.2.2.149, 127.2.2.148, 127.2.2.147, 127.2.2.146,
127.2.2.145, 127.2.2.144, 127.2.2.143, 127.2.2.142, 127.2.2.141, 127.2.2.140,
127.2.2.139, 127.2.2.138, 127.2.2.137, 127.2.2.136, 127.2.2.135, 127.2.2.134,
127.2.2.133, 127.2.2.132, 127.2.2.131, 127.2.2.130, 127.2.2.129, 127.2.2.128,
127.2.2.127, 127.2.2.126, 127.2.2.125, 127.2.2.124, 127.2.2.123, 127.2.2.122,
127.2.2.121, 127.2.2.120, 127.2.2.119, 127.2.2.118, 127.2.2.117, 127.2.2.116,
127.2.2.115, 127.2.2.114, 127.2.2.113, 127.2.2.112, 127.2.2.111, 127.2.2.110,
127.2.2.109, 127.2.2.108, 127.2.2.107, 127.2.2.106, 127.2.2.105, 127.2.2.104,
127.2.2.103, 127.2.2.102, 127.2.2.101, 127.2.2.100, 127.2.2.99, 127.2.2.98,
127.2.2.97, 127.2.2.96, 127.2.2.95, 127.2.2.94, 127.2.2.93, 127.2.2.92,
127.2.2.91, 127.2.2.90, 127.2.2.89, 127.2.2.88, 127.2.2.87, 127.2.2.86,
127.2.2.85, 127.2.2.84, 127.2.2.83, 127.2.2.82, 127.2.2.81, 127.2.2.80,
127.2.2.79, 127.2.2.78, 127.2.2.77, 127.2.2.76, 127.2.2.75, 127.2.2.74,
127.2.2.73, 127.2.2.72, 127.2.2.71, 127.2.2.70, 127.2.2.69, 127.2.2.68,
127.2.2.67, 127.2.2.66, 127.2.2.65, 127.2.2.64, 127.2.2.63, 127.2.2.62,
127.2.2.61, 127.2.2.60, 127.2.2.59, 127.2.2.58, 127.2.2.57, 127.2.2.56,
127.2.2.55, 127.2.2.54, 127.2.2.53, 127.2.2.52, 127.2.2.51, 127.2.2.50,
127.2.2.49, 127.2.2.48, 127.2.2.47, 127.2.2.46, 127.2.2.45, 127.2.2.44,
127.2.2.43, 127.2.2.42, 127.2.2.41, 127.2.2.40, 127.2.2.39, 127.2.2.38,
127.2.2.37, 127.2.2.36, 127.2.2.35, 127.2.2.34, 127.2.2.33, 127.2.2.32,
127.2.2.31, 127.2.2.30, 127.2.2.29, 127.2.2.28, 127.2.2.27, 127.2.2.26,
127.2.2.25, 127.2.2.24, 127.2.2.23, 127.2.2.22, 127.2.2.21, 127.2.2.20,
127.2.2.19, 127.2.2.18, 127.2.2.17, 127.2.2.16, 127.2.2.15, 127.2.2.14,
127.2.2.13, 127.2.2.12, 127.2.2.11, 127.2.2.10, 127.2.2.9, 127.2.2.8,
127.2.2.7, 127.2.2.6, 127.2.2.5, 127.2.2.4, 127.2.2.3, 127.2.2.2} accept #
handle 2
    }
}


You can add a non-name set with 255 elements and nft does not show any problem
or error. Then, If you list the nft table, It does not show this rule

### Con 255 
 $ sudo nft add table ip test-2
 $ sudo sudo nft add chain ip test-2 input255 { type filter hook input priority
0 \; }
 $ sudo nft add rule ip test-2 input255 ip saddr {127.2.2.2, 127.2.2.3,
127.2.2.4, 127.2.2.5, 127.2.2.6, 127.2.2.7, 127.2.2.8, 127.2.2.9, 127.2.2.10,
127.2.2.11, 127.2.2.12, 127.2.2.13, 127.2.2.14, 127.2.2.15, 127.2.2.16,
127.2.2.17, 127.2.2.18, 127.2.2.19, 127.2.2.20, 127.2.2.21, 127.2.2.22,
127.2.2.23, 127.2.2.24, 127.2.2.25, 127.2.2.26, 127.2.2.27, 127.2.2.28,
127.2.2.29, 127.2.2.30, 127.2.2.31, 127.2.2.32, 127.2.2.33, 127.2.2.34,
127.2.2.35, 127.2.2.36, 127.2.2.37, 127.2.2.38, 127.2.2.39, 127.2.2.40,
127.2.2.41, 127.2.2.42, 127.2.2.43, 127.2.2.44, 127.2.2.45, 127.2.2.46,
127.2.2.47, 127.2.2.48, 127.2.2.49, 127.2.2.50, 127.2.2.51, 127.2.2.52,
127.2.2.53, 127.2.2.54, 127.2.2.55, 127.2.2.56, 127.2.2.57, 127.2.2.58,
127.2.2.59, 127.2.2.60, 127.2.2.61, 127.2.2.62, 127.2.2.63, 127.2.2.64,
127.2.2.65, 127.2.2.66, 127.2.2.67, 127.2.2.68, 127.2.2.69, 127.2.2.70,
127.2.2.71, 127.2.2.72, 127.2.2.73, 127.2.2.74, 127.2.2.75, 127.2.2.76,
127.2.2.77, 127.2.2.78, 127.2.2.79, 127.2.2.80, 127.2.2.81, 127.2.2.82,
127.2.2.83, 127.2.2.84, 127.2.2.85, 127.2.2.86, 127.2.2.87, 127.2.2.88,
127.2.2.89, 127.2.2.90, 127.2.2.91, 127.2.2.92, 127.2.2.93, 127.2.2.94,
127.2.2.95, 127.2.2.96, 127.2.2.97, 127.2.2.98, 127.2.2.99, 127.2.2.100,
127.2.2.101, 127.2.2.102, 127.2.2.103, 127.2.2.104, 127.2.2.105, 127.2.2.106,
127.2.2.107, 127.2.2.108, 127.2.2.109, 127.2.2.110, 127.2.2.111, 127.2.2.112,
127.2.2.113, 127.2.2.114, 127.2.2.115, 127.2.2.116, 127.2.2.117, 127.2.2.118,
127.2.2.119, 127.2.2.120, 127.2.2.121, 127.2.2.122, 127.2.2.123, 127.2.2.124,
127.2.2.125, 127.2.2.126, 127.2.2.127, 127.2.2.128, 127.2.2.129, 127.2.2.130,
127.2.2.131, 127.2.2.132, 127.2.2.133, 127.2.2.134, 127.2.2.135, 127.2.2.136,
127.2.2.137, 127.2.2.138, 127.2.2.139, 127.2.2.140, 127.2.2.141, 127.2.2.142,
127.2.2.143, 127.2.2.144, 127.2.2.145, 127.2.2.146, 127.2.2.147, 127.2.2.148,
127.2.2.149, 127.2.2.150, 127.2.2.151, 127.2.2.152, 127.2.2.153, 127.2.2.154,
127.2.2.155, 127.2.2.156, 127.2.2.157, 127.2.2.158, 127.2.2.159, 127.2.2.160,
127.2.2.161, 127.2.2.162, 127.2.2.163, 127.2.2.164, 127.2.2.165, 127.2.2.166,
127.2.2.167, 127.2.2.168, 127.2.2.169, 127.2.2.170, 127.2.2.171, 127.2.2.172,
127.2.2.173, 127.2.2.174, 127.2.2.175, 127.2.2.176, 127.2.2.177, 127.2.2.178,
127.2.2.179, 127.2.2.180, 127.2.2.181, 127.2.2.182, 127.2.2.183, 127.2.2.184,
127.2.2.185, 127.2.2.186, 127.2.2.187, 127.2.2.188, 127.2.2.189, 127.2.2.190,
127.2.2.191, 127.2.2.192, 127.2.2.193, 127.2.2.194, 127.2.2.195, 127.2.2.196,
127.2.2.197, 127.2.2.198, 127.2.2.199, 127.2.2.200, 127.2.2.201, 127.2.2.202,
127.2.2.203, 127.2.2.204, 127.2.2.205, 127.2.2.206, 127.2.2.207, 127.2.2.208,
127.2.2.209, 127.2.2.210, 127.2.2.211, 127.2.2.212, 127.2.2.213, 127.2.2.214,
127.2.2.215, 127.2.2.216, 127.2.2.217, 127.2.2.218, 127.2.2.219, 127.2.2.220,
127.2.2.221, 127.2.2.222, 127.2.2.223, 127.2.2.224, 127.2.2.225, 127.2.2.226,
127.2.2.227, 127.2.2.228, 127.2.2.229, 127.2.2.230, 127.2.2.231, 127.2.2.232,
127.2.2.233, 127.2.2.234, 127.2.2.235, 127.2.2.236, 127.2.2.237, 127.2.2.238,
127.2.2.239, 127.2.2.240, 127.2.2.241, 127.2.2.242, 127.2.2.243, 127.2.2.244,
127.2.2.245, 127.2.2.246, 127.2.2.247, 127.2.2.248, 127.2.2.249, 127.2.2.250,
127.2.2.251, 127.2.2.252, 127.2.3.2, 127.2.3.3, 127.2.3.4, 127.2.3.5, } accept
 $ sudo nft list table ip test-2
table ip test-2 {
    chain input255 {
         type filter hook input priority 0;
    }
}


# Other example with a non-name set with 300 element


 $ sudo nft add table ip test-3
 $ sudo sudo nft add chain ip test-3 input300 { type filter hook input priority
0 \; }anarey at tuxhiba ~
 $ sudo nft add rule ip test-3 input300 ip saddr {127.2.2.2, 127.2.2.3,
127.2.2.4, 127.2.2.5, 127.2.2.6, 127.2.2.7, 127.2.2.8, 127.2.2.9, 127.2.2.10,
127.2.2.11, 127.2.2.12, 127.2.2.13, 127.2.2.14, 127.2.2.15, 127.2.2.16,
127.2.2.17, 127.2.2.18, 127.2.2.19, 127.2.2.20, 127.2.2.21, 127.2.2.22,
127.2.2.23, 127.2.2.24, 127.2.2.25, 127.2.2.26, 127.2.2.27, 127.2.2.28,
127.2.2.29, 127.2.2.30, 127.2.2.31, 127.2.2.32, 127.2.2.33, 127.2.2.34,
127.2.2.35, 127.2.2.36, 127.2.2.37, 127.2.2.38, 127.2.2.39, 127.2.2.40,
127.2.2.41, 127.2.2.42, 127.2.2.43, 127.2.2.44, 127.2.2.45, 127.2.2.46,
127.2.2.47, 127.2.2.48, 127.2.2.49, 127.2.2.50, 127.2.2.51, 127.2.2.52,
127.2.2.53, 127.2.2.54, 127.2.2.55, 127.2.2.56, 127.2.2.57, 127.2.2.58,
127.2.2.59, 127.2.2.60, 127.2.2.61, 127.2.2.62, 127.2.2.63, 127.2.2.64,
127.2.2.65, 127.2.2.66, 127.2.2.67, 127.2.2.68, 127.2.2.69, 127.2.2.70,
127.2.2.71, 127.2.2.72, 127.2.2.73, 127.2.2.74, 127.2.2.75, 127.2.2.76,
127.2.2.77, 127.2.2.78, 127.2.2.79, 127.2.2.80, 127.2.2.81, 127.2.2.82,
127.2.2.83, 127.2.2.84, 127.2.2.85, 127.2.2.86, 127.2.2.87, 127.2.2.88,
127.2.2.89, 127.2.2.90, 127.2.2.91, 127.2.2.92, 127.2.2.93, 127.2.2.94,
127.2.2.95, 127.2.2.96, 127.2.2.97, 127.2.2.98, 127.2.2.99, 127.2.2.100,
127.2.2.101, 127.2.2.102, 127.2.2.103, 127.2.2.104, 127.2.2.105, 127.2.2.106,
127.2.2.107, 127.2.2.108, 127.2.2.109, 127.2.2.110, 127.2.2.111, 127.2.2.112,
127.2.2.113, 127.2.2.114, 127.2.2.115, 127.2.2.116, 127.2.2.117, 127.2.2.118,
127.2.2.119, 127.2.2.120, 127.2.2.121, 127.2.2.122, 127.2.2.123, 127.2.2.124,
127.2.2.125, 127.2.2.126, 127.2.2.127, 127.2.2.128, 127.2.2.129, 127.2.2.130,
127.2.2.131, 127.2.2.132, 127.2.2.133, 127.2.2.134, 127.2.2.135, 127.2.2.136,
127.2.2.137, 127.2.2.138, 127.2.2.139, 127.2.2.140, 127.2.2.141, 127.2.2.142,
127.2.2.143, 127.2.2.144, 127.2.2.145, 127.2.2.146, 127.2.2.147, 127.2.2.148,
127.2.2.149, 127.2.2.150, 127.2.2.151, 127.2.2.152, 127.2.2.153, 127.2.2.154,
127.2.2.155, 127.2.2.156, 127.2.2.157, 127.2.2.158, 127.2.2.159, 127.2.2.160,
127.2.2.161, 127.2.2.162, 127.2.2.163, 127.2.2.164, 127.2.2.165, 127.2.2.166,
127.2.2.167, 127.2.2.168, 127.2.2.169, 127.2.2.170, 127.2.2.171, 127.2.2.172,
127.2.2.173, 127.2.2.174, 127.2.2.175, 127.2.2.176, 127.2.2.177, 127.2.2.178,
127.2.2.179, 127.2.2.180, 127.2.2.181, 127.2.2.182, 127.2.2.183, 127.2.2.184,
127.2.2.185, 127.2.2.186, 127.2.2.187, 127.2.2.188, 127.2.2.189, 127.2.2.190,
127.2.2.191, 127.2.2.192, 127.2.2.193, 127.2.2.194, 127.2.2.195, 127.2.2.196,
127.2.2.197, 127.2.2.198, 127.2.2.199, 127.2.2.200, 127.2.2.201, 127.2.2.202,
127.2.2.203, 127.2.2.204, 127.2.2.205, 127.2.2.206, 127.2.2.207, 127.2.2.208,
127.2.2.209, 127.2.2.210, 127.2.2.211, 127.2.2.212, 127.2.2.213, 127.2.2.214,
127.2.2.215, 127.2.2.216, 127.2.2.217, 127.2.2.218, 127.2.2.219, 127.2.2.220,
127.2.2.221, 127.2.2.222, 127.2.2.223, 127.2.2.224, 127.2.2.225, 127.2.2.226,
127.2.2.227, 127.2.2.228, 127.2.2.229, 127.2.2.230, 127.2.2.231, 127.2.2.232,
127.2.2.233, 127.2.2.234, 127.2.2.235, 127.2.2.236, 127.2.2.237, 127.2.2.238,
127.2.2.239, 127.2.2.240, 127.2.2.241, 127.2.2.242, 127.2.2.243, 127.2.2.244,
127.2.2.245, 127.2.2.246, 127.2.2.247, 127.2.2.248, 127.2.2.249, 127.2.2.250,
127.2.2.251, 127.2.2.252, 127.2.3.2, 127.2.3.3, 127.2.3.4, 127.2.3.5,
127.2.3.6, 127.2.3.7, 127.2.3.8, 127.2.3.9, 127.2.3.10, 127.2.3.11, 127.2.3.12,
127.2.3.13, 127.2.3.14, 127.2.3.15, 127.2.3.16, 127.2.3.17, 127.2.3.18,
127.2.3.19, 127.2.3.20, 127.2.3.21, 127.2.3.22, 127.2.3.23, 127.2.3.24,
127.2.3.25, 127.2.3.26, 127.2.3.27, 127.2.3.28, 127.2.3.29, 127.2.3.30,
127.2.3.31, 127.2.3.32, 127.2.3.33, 127.2.3.34, 127.2.3.35, 127.2.3.36,
127.2.3.37, 127.2.3.38, 127.2.3.39, 127.2.3.40, 127.2.3.41, 127.2.3.42,
127.2.3.43, 127.2.3.44, 127.2.3.45, 127.2.3.46, 127.2.3.47, 127.2.3.48,
127.2.3.49, 127.2.3.50, } accept
 $ sudo nft -nna list table ip test-3
table ip test-3 {
    chain input300 {
         type filter hook input priority 0;
    }
}

I can always reproduce this bug.

The last commit in libmnl repo is "090a842 examples: use
mnl_socket_setsockopt"
The last commit in libnftnl repo is "076fd1e include: add cached copy of
linux/kernel.h"
The last commit in nftables repo is 11ba325 bump release number to 0.100

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.

bugzilla-daemon at netfilter.org

2014-Mar-13 08:03 UTC

head link

[Bug 898] You can not add a non-name set with more than 255 elements aprox. Do not show any error.

https://bugzilla.netfilter.org/show_bug.cgi?id=898

Yuxuan Shui <yshuiv7 at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |yshuiv7 at gmail.com

--- Comment #1 from Yuxuan Shui <yshuiv7 at gmail.com> 2014-03-13 09:03:57
CET ---
After digging into the code I found out where the problem is, but I don't
know
how exactly should I fix it.

The fix-length buf is too small in several functions which result in buffer
overflow. Should I change the libnftnl and libmnl API to accept a length
parameter to avoid buffer overflow (which will result in a large patch), or
should I just make sure there won't be too many elements in a set?

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.

bugzilla-daemon at netfilter.org

2014-Mar-13 08:05 UTC

head link

[Bug 898] You can not add a non-name set with more than 255 elements aprox. Do not show any error.

https://bugzilla.netfilter.org/show_bug.cgi?id=898

Yuxuan Shui <yshuiv7 at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |devkid at devkid.net

--- Comment #2 from Yuxuan Shui <yshuiv7 at gmail.com> 2014-03-13 09:05:15
CET ---
*** Bug 899 has been marked as a duplicate of this bug. ***

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.

bugzilla-daemon at netfilter.org

2014-Jul-23 20:47 UTC

head link

[Bug 898] You can not add a non-name set with more than 255 elements aprox. Do not show any error.

https://bugzilla.netfilter.org/show_bug.cgi?id=898

Pablo Neira Ayuso <pablo at netfilter.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |bugzilla-netfilter at malc.org
                   |                            |.uk

--- Comment #3 from Pablo Neira Ayuso <pablo at netfilter.org> 2014-07-23
22:47:08 CEST ---
*** Bug 967 has been marked as a duplicate of this bug. ***

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.

bugzilla-daemon at netfilter.org

2014-Jul-24 00:49 UTC

head link

[Bug 898] You can not add a non-name set with more than 255 elements aprox. Do not show any error.

https://bugzilla.netfilter.org/show_bug.cgi?id=898

Pablo Neira Ayuso <pablo at netfilter.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED

--- Comment #4 from Pablo Neira Ayuso <pablo at netfilter.org> 2014-07-24
02:49:38 CEST ---
Several patches to address this problems has been posted on the netfilter-devel
mailing list:

http://patchwork.ozlabs.org/patch/373062/
http://patchwork.ozlabs.org/patch/373064/
http://patchwork.ozlabs.org/patch/373065/

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.

bugzilla-daemon at netfilter.org

2015-Jan-07 16:23 UTC

head link

[Bug 898] You can not add a non-name set with more than 255 elements aprox. Do not show any error.

https://bugzilla.netfilter.org/show_bug.cgi?id=898

Pablo Neira Ayuso <pablo at netfilter.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20150107/1b50e539/attachment.html>

netfilter buglog - Feb 2014 - [Bug 898] New: You can not add a non-name set with more than 255 elements aprox. Do not show any error.

[Bug 898] New: You can not add a non-name set with more than 255 elements aprox. Do not show any error.

[Bug 898] You can not add a non-name set with more than 255 elements aprox. Do not show any error.

[Bug 898] You can not add a non-name set with more than 255 elements aprox. Do not show any error.

[Bug 898] You can not add a non-name set with more than 255 elements aprox. Do not show any error.

[Bug 898] You can not add a non-name set with more than 255 elements aprox. Do not show any error.

[Bug 898] You can not add a non-name set with more than 255 elements aprox. Do not show any error.