search for: payload_expr_alloc

...pablo at netfilter.org ReportedBy: anarey at gmail.com Estimated Hours: 0.0 There is a problem when we use doff parameter: * We add the following rule, and It shows these error. $ sudo nft add rule ip test input tcp doff 33 ==14515== Invalid read of size 4 ==14515== at 0x40D9E0: payload_expr_alloc (payload.c:111) ==14515== by 0x41CB63: nft_parse (parser.y:1967) ==14515== by 0x405BCF: nft_run (main.c:223) ==14515== by 0x405854: main (main.c:334) ==14515== Address 0x4 is not stack'd, malloc'd or (recently) free'd ==14515== ==14515== ==14515== Process terminating with de...

...BYTEORDER_HOST_ENDIAN, sizeof(data) * BITS_PER_BYTE, &data); } | TCP tcp_hdr_field { $$ = payload_expr_alloc(&@$, &payload_tcp, $2); } ; But there is a bug in the grammar because the following rule is not working: nft add rule ip6 filter input tcp accept --debug=all ... Cleanup: discarding lookahead token "accept" (: ) Stack now 0 <cmd...