netfilter buglog - Aug 2020 - [Bug 1454] New: nft list set omits timeout values for intervals formatted as hyphenated ranges

https://bugzilla.netfilter.org/show_bug.cgi?id=1454

            Bug ID: 1454
           Summary: nft list set omits timeout values for intervals
                    formatted as hyphenated ranges
           Product: nftables
           Version: unspecified
          Hardware: x86_64
                OS: Gentoo
            Status: NEW
          Severity: normal
          Priority: P5
         Component: nft
          Assignee: pablo at netfilter.org
          Reporter: kfm at plushkava.net

Sometimes, the list set command expresses intervals as ranges rather than in
CIDR notation. I do not understand what the criteria is for doing so, exactly.
When it happens, the attached timeout values are not reported.

Here are some demonstrations, which were carried out with nftables (commit
ca2e6e0), libnftnl (commit a4db940) and Linux 5.7.16.

# nft create table t
# nft 'add set t s { type ipv4_addr; flags interval; timeout 60s; }'
# nft add element t s { 224.0.0.0/3 }
# nft list set t s | grep -o 'elements.*'
elements = { 224.0.0.0-255.255.255.255 }

Here, the list command has not shown the timeout for the element, even though
one is attached.

# nft flush set t s
# nft add element t s { 224.0.0.0/4, 240.0.0.0/4 }
# nft list set t s | grep -o 'elements.*'
elements = { 224.0.0.0/4 expires 55s152ms, 240.0.0.0-255.255.255.255 }

Here, the list command shows two elements, with the timeout missing for one of
them.

# nft delete set t s
# nft 'add set t s { type ipv4_addr; flags interval; auto-merge; timeout
60s;
}'
# nft add element t s { 224.0.0.0/4, 240.0.0.0/4 }
# nft list set t s | grep -o 'elements.*'
elements = { 224.0.0.0-255.255.255.255 }

Here, the given elements have been correctly merged but, again, the timeout is
missing.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200824/806b1386/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1454

kfm at plushkava.net changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           See Also|                            |https://bugzilla.netfilter.
                   |                            |org/show_bug.cgi?id=1392

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200824/1c521108/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1454

kfm at plushkava.net changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           See Also|                            |https://bugzilla.netfilter.
                   |                            |org/show_bug.cgi?id=1180

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200827/5b7b2a35/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1454

kfm at plushkava.net changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Blocks|                            |1461

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200829/5f2757cd/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1454

Pablo Neira Ayuso <pablo at netfilter.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED

--- Comment #1 from Pablo Neira Ayuso <pablo at netfilter.org> ---
IIRC this is fixed by:

commit c1f0476fd59002db14172072d9f192c23deb2a1f
Author: Florian Westphal <fw at strlen.de>
Date:   Thu Oct 15 16:47:21 2020 +0200

    segtree: copy expr data to closing element

Could you confirm this? Thanks.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20201202/e0a03146/attachment-0001.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1454

kfm at plushkava.net changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED

--- Comment #2 from kfm at plushkava.net ---
I can indeed. Version 0.9.7 works perfectly. Closing as RESOLVED.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20201203/9ae6665e/attachment.html>