netfilter buglog - May 2014 - [Bug 923] New: set: It Is not possible invert a set

https://bugzilla.netfilter.org/show_bug.cgi?id=923

           Summary: set: It Is not possible invert a set
           Product: nftables
           Version: unspecified
          Platform: x86_64
        OS/Version: Debian GNU/Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: nft
        AssignedTo: pablo at netfilter.org
        ReportedBy: anarey at gmail.com
   Estimated Hours: 0.0


It Is not possible invert a set. Here an example of this bug.

$ sudo nft add rule ip test input tcp sport != { 22, 53, 80, 110 } counter
BUG: invalid expression type set
nft: src/evaluate.c:975: expr_evaluate_relational: Assertion `0' failed.

The last commit in Pablo git tree of kernel is "40e6442 netfilter:
x_tables:
allow to use cgroup match for LOCAL_IN nf hooks"
The last commit in libmnl repo is "090a842 examples: use
mnl_socket_setsockopt"
The last commit in libnftnl repo is "57107c2 common: fix unconditional
output
of event wrapping stuff"
The last commit in nftables repo is "aefa9bf expression: Fix inconsistent
output in set"

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.

https://bugzilla.netfilter.org/show_bug.cgi?id=923

Pablo Neira Ayuso <pablo at netfilter.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |deleriux1 at gmail.com

--- Comment #1 from Pablo Neira Ayuso <pablo at netfilter.org> 2014-06-25
19:40:26 CEST ---
*** Bug 888 has been marked as a duplicate of this bug. ***

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.

https://bugzilla.netfilter.org/show_bug.cgi?id=923

lucazorzo at gmail.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |lucazorzo at gmail.com

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20141102/f2eb81ba/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=923

Phil Sutter <phil at nwl.cc> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
                 CC|                            |phil at nwl.cc
             Status|NEW                         |RESOLVED

--- Comment #2 from Phil Sutter <phil at nwl.cc> ---
This should be fixed since nftables commit
cc7b37d18a687d53e8724b3104b042e6767a9cef which fixed bug 888 (that has been
marked as duplicate of this one).

In addition to that, I verified that the previously failing rule works fine in
current Fedora.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20170425/c5c3f527/attachment.html>