Re: [nft] segfault bug in simple ruleset, regression?

[Florian Westphal <fw@strlen.de>]

Pablo Neira Ayuso <pablo@netfilter.org> wrote:
> > flush ruleset
> > table inet filter {
> >         chain test0 {
> >         }
> > 
> >         chain test1 {
> >         }
> > 
> >         chain test2 {
> >         }
> > 
> >         chain test {
> >                 oif vmap {
> >                         eth0 : jump test0,
> >                         eth1 : jump test1,
> >                         eth2 : jump test2
> >                 }
> >         }
> > }
> > ========== 8< ==========
> > 
> > loaded with:
> >  % nft -f file
> 
> I cannot reproduce this here using this:

I can reproduce it, but with slight tweak.

flush ruleset
table inet filter {
        chain test0 {
        }
        chain test {
                oif vmap {
                        eth0 : jump test0,
                }
        }
}

(load it with nft -f )

Then edit file to add 2nd chain:
flush ruleset
table inet filter {
        chain test0 {
        }
        chain test1 {
        }
        chain test {
                oif vmap {
                        eth0 : jump test0,
                        lo: jump test1,
                }
        }
}

load it. poof..