netfilter buglog - Mar 2016 - [Bug 1059] New: Using wildcard interface names in an anonymous set fails on big endian

https://bugzilla.netfilter.org/show_bug.cgi?id=1059

            Bug ID: 1059
           Summary: Using wildcard interface names in an anonymous set
                    fails on big endian
           Product: nftables
           Version: unspecified
          Hardware: ppc
                OS: other
            Status: NEW
          Severity: major
          Priority: P5
         Component: nft
          Assignee: pablo at netfilter.org
          Reporter: magnus.oberg at westermo.se

I'm running on a PPC platform, big endian.

I'm getting this error at run-time:

/var/run/nftables.rules:10:6-12: Error: Byteorder mismatch: expected big
endian, got host endian
     iifname { "vlan1", "vi-vlan1_*" } ip daddr 33.44.5.6/32
ip protocol 6 tcp
dport 222 accept
     ^^^^^^^

It appears when using a wildcard interface string in an inline set.

The error is raised in byteorder_conversion() called from
expr_evaluate_relational() in evaluate.c.
Inside the OP_LOOKUP case, row 1232.

The string should in host byte order, but that is not expected for the lookup
(due to the prefix_expr_alloc()?)

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20160321/ff4b1368/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1059

Phil Sutter <phil at nwl.cc> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |phil at nwl.cc

--- Comment #1 from Phil Sutter <phil at nwl.cc> ---
This is not only an issue on big endian systems, little endian is affected as
well. Actually, this is a missing feature as mentioned in commit
b851ba4731d9f7c5e38889875a83173fcc4d3f16:

"Wildcard strings are not supported from sets and maps yet. Error
reporting is not very good at this stage since expr_evaluate_prefix()
doesn't have enough context (ctx->set is NULL, the set object is
currently created later after evaluating the lhs and rhs of the
relational)."

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20170324/5b068e0d/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1059

Phil Sutter <phil at nwl.cc> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Hardware|ppc                         |All
            Summary|Using wildcard interface    |RFE: allow wildcard strings
                   |names in an anonymous set   |in sets (and maps)
                   |fails on big endian         |

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20170324/45268137/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1059

kfm at plushkava.net changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |kfm at plushkava.net

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200129/a41824f0/attachment-0001.html>