search for: nftnl_expr

https://bugzilla.netfilter.org/show_bug.cgi?id=1685 Bug ID: 1685 Summary: Calling the nftnl_set_free function may trigger the "double free" problem. Product: libnftnl Version: unspecified Hardware: All OS: All Status: NEW Severity: critical Priority: P5

...hain: add netdev family support expr: immediate: fix leak in expression destroy path src: introduce nftnl_* aliases for all existing functions src: rename existing functions to use the nftnl_ prefix src: add compat header file definitions src: rename nftnl_rule_expr to nftnl_expr src: rename NFTNL_RULE_EXPR_ATTR to NFTNL_EXPR_ src: get rid of _ATTR_ infix in new nfntl_ definitions src: get rid of _attr_ infix in new nftnl_ definitions bump version to 1.0.4 Patrick McHardy (11): list: fix prefetch dummy set: add support for set timeouts...

...gfault when trying to print it. The rule itself is probably very invalid, but nft should likely not segfault when printing it. # Rule that triggers the segfault: This is how to create the rule from C using libnftnl: static struct nftnl_rule *setup_rule() { struct nftnl_rule *rule; struct nftnl_expr *payload_expr, *cmp_expr; uint8_t mac[6] = {0, 0, 0, 0, 0, 0}; rule = nftnl_rule_alloc(); // The segfault is only triggered if the rule is an NFPROTO_INET rule. nftnl_rule_set(rule, NFTNL_RULE_TABLE, "my_table"); nftnl_rule_set(rule, NFTNL_RULE_CHAIN, "my_chain&q...