[nft PATCH 2/4 v2] evaluate: accept a reject reason with incorrect network context

[Alvaro Neira Ayuso <alvaroneay@gmail.com>]

nft add rule bridge test-bridge input ether type ip \
				reject with icmpv6 type no-route

This rule pass the evaluation step but the network context is incompatible with
the reject reason. In that cases, we have to throw an error like "conflicting
protocols specified: ip vs ip6"

Signed-off-by: Alvaro Neira Ayuso <alvaroneay@gmail.com>
---
[no changes in v2]

 src/evaluate.c |    2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/evaluate.c b/src/evaluate.c
index e26e2f8..017d9b0 100644
--- a/src/evaluate.c
+++ b/src/evaluate.c
@@ -1258,6 +1258,8 @@ static int stmt_evaluate_reject_bridge_family(struct eval_ctx *ctx,
 	case __constant_htons(ETH_P_IP):
 		if (NFPROTO_IPV4 == stmt->reject.family)
 			break;
+		return stmt_error(ctx, stmt,
+				  "conflicting protocols specified: ip vs ip6");
 	case __constant_htons(ETH_P_IPV6):
 		if (NFPROTO_IPV6 == stmt->reject.family)
 			break;
-- 
1.7.10.4