* 'nft' crashes.
[not found] <03c6f343-d5c5-45e9-bf8e-b04f703eb111.ref@sbcglobal.net>
@ 2025-08-17 2:09 ` S Egbert
2025-08-17 21:48 ` Pablo Neira Ayuso
0 siblings, 1 reply; 2+ messages in thread
From: S Egbert @ 2025-08-17 2:09 UTC (permalink / raw)
To: netfilter
Mmmmmmm, a crash in nft CLI.
First noticed in nft 1.1.3, now at nft 1.1.4. Will try latest HEAD over
at git.netfilter.org/[libnftnl|nftables].git
Created my own test corpus on 'nft' syntax highlighting. Was trying
something wild here (seemingly a valid syntax, according to
parser_bison.y, but not scanner.c).
Content of add-chain.tp.nft file is:
define MY_POLICY = deny
table T { chain C { policy $MY_POLICY; };};
GDB-captured crash dump:
# gdb /opt/nftables/sbin/nft
GNU gdb (Debian 16.3-1) 16.3
(gdb) set args -c -f add-chain.tp.nft
(gdb) b main
Breakpoint 1 at 0x194b0: file src/main.c, line 361.
(gdb) r
Starting program: /opt/nftables/sbin/nft -c -f add-chain.tp.nft
This GDB supports auto-downloading debuginfo from the following URLs:
<https://debuginfod.debian.net>
Enable debuginfod for this session? (y or [n]) y
Debuginfod has been enabled.
To make this setting permanent, add 'set debuginfod enabled on' to .gdbinit.
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Breakpoint 1, main (argc=4, argv=0x7fffffffc938) at src/main.c:361
361 const struct option *options = get_options();
(gdb) c
Continuing.
Program received signal SIGSEGV, Segmentation fault.
Download failed: Invalid argument. Continuing without source file
./build/mpz/../../mpz/export.c.
0x00007ffff7edb6d2 in __gmpz_export (data=0x7fffffffc4f8,
countp=0x7fffffffc430, order=-1, size=4, endian=0,
nail=0, z=0x5555556b3440) at ../../mpz/export.c:75
warning: 75 ../../mpz/export.c: No such file or directory
(gdb) bt
#0 0x00007ffff7edb6d2 in __gmpz_export (data=0x7fffffffc4f8,
countp=0x7fffffffc430, order=-1, size=4,
endian=0, nail=0, z=0x5555556b3440) at ../../mpz/export.c:75
#1 0x00005555555f25cc in __mpz_export_data (data=0x7fffffffc4f8,
op=0x5555556b3440,
byteorder=BYTEORDER_HOST_ENDIAN, len=4) at src/gmputil.c:109
#2 0x0000555555573f62 in mnl_nft_chain_add (ctx=0x7fffffffc5e0,
cmd=0x55555570aac0, flags=0)
at src/mnl.c:882
#3 0x000055555559e1bc in do_command_add (ctx=0x7fffffffc5e0,
cmd=0x55555570aac0, excl=false)
at src/rule.c:1525
#4 0x00005555555a1814 in do_command (ctx=0x7fffffffc5e0,
cmd=0x55555570aac0) at src/rule.c:2625
#5 0x000055555556e263 in nft_netlink (nft=0x5555556812a0,
cmds=0x7fffffffc6e0, msgs=0x7fffffffc6f0)
at src/libnftables.c:43
#6 0x000055555556fc43 in __nft_run_cmd_from_filename (nft=0x5555556812a0,
filename=0x7fffffffcce4 "add-chain.tp.nft") at src/libnftables.c:753
#7 0x0000555555570023 in nft_run_cmd_from_filename (nft=0x5555556812a0,
filename=0x7fffffffcce4 "add-chain.tp.nft") at src/libnftables.c:847
#8 0x000055555556da31 in main (argc=4, argv=0x7fffffffc938) at
src/main.c:535
(gdb)
^ permalink raw reply [flat|nested] 2+ messages in thread