netfilter buglog - Apr 2018 - [Bug 1243] New: Wildcard can only include <16 files

https://bugzilla.netfilter.org/show_bug.cgi?id=1243

            Bug ID: 1243
           Summary: Wildcard can only include <16 files
           Product: nftables
           Version: unspecified
          Hardware: x86_64
                OS: All
            Status: NEW
          Severity: normal
          Priority: P5
         Component: nft
          Assignee: pablo at netfilter.org
          Reporter: ipstanistreet at gmail.com

When an include statement matches 16 or more files, it results in 'Error:
Include nested too deeply, max 16 levels'.

nftables version: 0.8.3 (arch pkg 1:0.8.3-1).

To Reproduce:
$ mkdir ./rules
$ for i in {1..16}; do touch ./rules/$i; done
$ nft include '"./rules/*"'
Error: Include nested too deeply, max 16 levels
include "./rules/*"
^^^^^^^^^^^^^^^^^^^^

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20180414/699a823c/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1243

Pablo Neira Ayuso <pablo at netfilter.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20190712/c54823c0/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1243

kfm at plushkava.net changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |kfm at plushkava.net

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200128/1a79aeb0/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1243

Frank Myhr <fmyhr at fhmtech.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |fmyhr at fhmtech.com

--- Comment #1 from Frank Myhr <fmyhr at fhmtech.com> ---
Hit this today. "Nested" wording of error message sent me on a
fruitless search
for mismatched curly braces and/or missing newlines, until I finally cat'ed
all
files together and included that single file, which works fine.

I'd suggest that whatever the numerical limit on included files, the error
message could be improved. Perhaps something like: "Number of included
files
exceeds maximum of 16."


* Not entirely logical on my part, I know, since the error message refers to
nested includes, not nested structures. But I already knew the files I was
including do not themselves include other files. Curly braces were the only
other possible "nesting" I could think of.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200131/6f175667/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1243

fasnacht at protonmail.ch changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |fasnacht at protonmail.ch

--- Comment #2 from fasnacht at protonmail.ch ---
The latest master has this bug too.

In fact after a quick look at the source files, it seems that there is some
confusion between nested and multiple includes in one statement.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200203/9eda846c/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1243

fasnacht at protonmail.ch changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Assignee|pablo at netfilter.org         |fasnacht at protonmail.ch

--- Comment #3 from fasnacht at protonmail.ch ---
I'm working on it...

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200204/bbcbe299/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1243

Jiri <jiri at samohyb.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jiri at samohyb.com

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200630/64b4e9d1/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1243

--- Comment #4 from Jiri <jiri at samohyb.com> ---
Hello, any updates on this? We were using wildcard including a lot and this
surprised us :)
Are there another "hidden" limits (like max number of rules in single
chain,
etc.)? :)
Thank you

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200630/870b4218/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1243

Pablo Neira Ayuso <pablo at netfilter.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |pablo at netfilter.org

--- Comment #5 from Pablo Neira Ayuso <pablo at netfilter.org> ---
This problem is fixed since 0.9.4.

Are you still experiencing problems with >= 0.9.4 ?

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200713/79491397/attachment.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1243

--- Comment #6 from Jiri <jiri at samohyb.com> ---
Sorry, I must have missed that in changelog. We're using default v0.9.0 in
Debian 10.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200713/e71fc92e/attachment-0001.html>

https://bugzilla.netfilter.org/show_bug.cgi?id=1243

Ian Stanistreet <ipstanistreet at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED

--- Comment #7 from Ian Stanistreet <ipstanistreet at gmail.com> ---
Confirmed working in 0.9.6

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200715/d58e6799/attachment-0001.html>