From: Pablo Neira Ayuso <pablo@netfilter.org>
To: netfilter-devel@vger.kernel.org
Subject: [PATCH nft 4/7] evaluate: simplify sets as set elems evaluation
Date: Fri, 5 Sep 2025 17:36:24 +0200 [thread overview]
Message-ID: <20250905153627.1315405-5-pablo@netfilter.org> (raw)
In-Reply-To: <20250905153627.1315405-1-pablo@netfilter.org>
After normalizing set element representation for EXPR_MAPPING, it is
possible to simplify:
a6b75b837f5e ("evaluate: set: Allow for set elems to be sets")
Extend tests/shell coverage to exercise merging nested sets.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
---
src/evaluate.c | 20 +++++---------------
1 file changed, 5 insertions(+), 15 deletions(-)
diff --git a/src/evaluate.c b/src/evaluate.c
index 0b7508a18ede..85c446a124ee 100644
--- a/src/evaluate.c
+++ b/src/evaluate.c
@@ -2090,27 +2090,17 @@ static int expr_evaluate_set(struct eval_ctx *ctx, struct expr **expr)
return expr_error(ctx->msgs, i,
"Set reference cannot be part of another set");
- if (elem->etype == EXPR_SET_ELEM &&
- elem->key->etype == EXPR_SET) {
- struct expr *new = expr_get(elem->key);
-
- expr_set(set)->set_flags |= expr_set(elem->key)->set_flags;
- list_replace(&i->list, &new->list);
- expr_free(i);
- i = new;
- elem = i;
- }
-
if (!expr_is_constant(i))
return expr_error(ctx->msgs, i,
"Set member is not constant");
- if (i->etype == EXPR_SET) {
+ if (i->etype == EXPR_SET_ELEM &&
+ i->key->etype == EXPR_SET) {
/* Merge recursive set definitions */
- list_splice_tail_init(&expr_set(i)->expressions, &i->list);
+ list_splice_tail_init(&expr_set(i->key)->expressions, &i->list);
list_del(&i->list);
- expr_set(set)->size += expr_set(i)->size - 1;
- expr_set(set)->set_flags |= expr_set(i)->set_flags;
+ expr_set(set)->size += expr_set(i->key)->size - 1;
+ expr_set(set)->set_flags |= expr_set(i->key)->set_flags;
expr_free(i);
} else if (!expr_is_singleton(i)) {
expr_set(set)->set_flags |= NFT_SET_INTERVAL;
--
2.30.2
next prev parent reply other threads:[~2025-09-05 15:45 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-09-05 15:36 [PATCH nft 0/7] prepare for EXPR_SET_ELEM removal Pablo Neira Ayuso
2025-09-05 15:36 ` [PATCH nft 1/7] src: normalize set element with EXPR_MAPPING Pablo Neira Ayuso
2025-09-07 14:10 ` Florian Westphal
2025-09-08 7:59 ` Pablo Neira Ayuso
2025-09-05 15:36 ` [PATCH nft 2/7] src: allocate EXPR_SET_ELEM for EXPR_SET in embedded set declaration in sets Pablo Neira Ayuso
2025-09-05 15:36 ` [PATCH nft 3/7] src: assert on EXPR_SET only contains EXPR_SET_ELEM in the expressions list Pablo Neira Ayuso
2025-09-05 15:36 ` Pablo Neira Ayuso [this message]
2025-09-05 15:36 ` [PATCH nft 5/7] evaluate: clean up expr_evaluate_set() Pablo Neira Ayuso
2025-09-05 15:36 ` [PATCH nft 6/7] segtree: rename set_elem_add() to set_elem_expr_add() Pablo Neira Ayuso
2025-09-05 15:36 ` [PATCH nft 7/7] src: move flags from EXPR_SET_ELEM to key Pablo Neira Ayuso
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20250905153627.1315405-5-pablo@netfilter.org \
--to=pablo@netfilter.org \
--cc=netfilter-devel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox