Update to 0.9.6 (RH#1846663)
This commit is contained in:
parent
37d2541970
commit
60b6d3d324
1
.gitignore
vendored
1
.gitignore
vendored
@ -17,3 +17,4 @@
|
|||||||
/nftables-0.9.1.tar.bz2
|
/nftables-0.9.1.tar.bz2
|
||||||
/nftables-0.9.2.tar.bz2
|
/nftables-0.9.2.tar.bz2
|
||||||
/nftables-0.9.3.tar.bz2
|
/nftables-0.9.3.tar.bz2
|
||||||
|
/nftables-0.9.6.tar.bz2
|
||||||
|
@ -1,62 +0,0 @@
|
|||||||
From 545c93d54d900e8e20071891b7e2bf3bb0e5fed2 Mon Sep 17 00:00:00 2001
|
|
||||||
From: Pablo Neira Ayuso <pablo@netfilter.org>
|
|
||||||
Date: Tue, 6 Jan 2015 21:28:53 +0100
|
|
||||||
Subject: evaluate: reject: fix dependency generation from nft -f
|
|
||||||
|
|
||||||
When nft -f is used, ctx->cmd points to the table object, which
|
|
||||||
contains the corresponding chain, set and rule lists. The reject
|
|
||||||
statement evaluator relies on ctx->cmd->rule to add the payload
|
|
||||||
dependencies, which is doesn't point to the rule in that case.
|
|
||||||
|
|
||||||
This patch adds the rule context to the eval_ctx structure to update
|
|
||||||
the rule list of statements when generating dependencies, as the reject
|
|
||||||
statement needs.
|
|
||||||
|
|
||||||
Closes: https://bugzilla.netfilter.org/show_bug.cgi?id=993
|
|
||||||
Reported-by: Ting-Wei Lan <lantw44@gmail.com>
|
|
||||||
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
|
|
||||||
|
|
||||||
diff --git a/include/rule.h b/include/rule.h
|
|
||||||
index 936177b..0c52315 100644
|
|
||||||
--- a/include/rule.h
|
|
||||||
+++ b/include/rule.h
|
|
||||||
@@ -344,6 +344,7 @@ extern void cmd_free(struct cmd *cmd);
|
|
||||||
* @msgs: message queue
|
|
||||||
* @cmd: current command
|
|
||||||
* @table: current table
|
|
||||||
+ * @rule: current rule
|
|
||||||
* @set: current set
|
|
||||||
* @stmt: current statement
|
|
||||||
* @ectx: expression context
|
|
||||||
@@ -353,6 +354,7 @@ struct eval_ctx {
|
|
||||||
struct list_head *msgs;
|
|
||||||
struct cmd *cmd;
|
|
||||||
struct table *table;
|
|
||||||
+ struct rule *rule;
|
|
||||||
struct set *set;
|
|
||||||
struct stmt *stmt;
|
|
||||||
struct expr_ctx ectx;
|
|
||||||
diff --git a/src/evaluate.c b/src/evaluate.c
|
|
||||||
index 8f0acf7..2c4e811 100644
|
|
||||||
--- a/src/evaluate.c
|
|
||||||
+++ b/src/evaluate.c
|
|
||||||
@@ -1203,7 +1203,7 @@ static int stmt_reject_gen_dependency(struct eval_ctx *ctx, struct stmt *stmt,
|
|
||||||
if (payload_gen_dependency(ctx, payload, &nstmt) < 0)
|
|
||||||
return -1;
|
|
||||||
|
|
||||||
- list_add(&nstmt->list, &ctx->cmd->rule->stmts);
|
|
||||||
+ list_add(&nstmt->list, &ctx->rule->stmts);
|
|
||||||
return 0;
|
|
||||||
}
|
|
||||||
|
|
||||||
@@ -1722,6 +1722,7 @@ static int rule_evaluate(struct eval_ctx *ctx, struct rule *rule)
|
|
||||||
proto_ctx_init(&ctx->pctx, rule->handle.family);
|
|
||||||
memset(&ctx->ectx, 0, sizeof(ctx->ectx));
|
|
||||||
|
|
||||||
+ ctx->rule = rule;
|
|
||||||
list_for_each_entry(stmt, &rule->stmts, list) {
|
|
||||||
if (tstmt != NULL)
|
|
||||||
return stmt_binary_error(ctx, stmt, tstmt,
|
|
||||||
--
|
|
||||||
cgit v0.10.2
|
|
||||||
|
|
@ -1,6 +1,6 @@
|
|||||||
Name: nftables
|
Name: nftables
|
||||||
Version: 0.9.3
|
Version: 0.9.6
|
||||||
Release: 6%{?dist}
|
Release: 1%{?dist}
|
||||||
# Upstream released a 0.100 version, then 0.4. Need Epoch to get back on track.
|
# Upstream released a 0.100 version, then 0.4. Need Epoch to get back on track.
|
||||||
Epoch: 1
|
Epoch: 1
|
||||||
Summary: Netfilter Tables userspace utillites
|
Summary: Netfilter Tables userspace utillites
|
||||||
@ -118,6 +118,9 @@ sed -i -e 's/\(sofile=\)".*"/\1"'$sofile'"/' \
|
|||||||
%{python3_sitelib}/nftables/
|
%{python3_sitelib}/nftables/
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Sat Sep 05 2020 Neal Gompa <ngompa13@gmail.com> - 1:0.9.6-1
|
||||||
|
- Update to 0.9.6 (RH#1846663)
|
||||||
|
|
||||||
* Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1:0.9.3-6
|
* Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1:0.9.3-6
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
|
||||||
|
|
||||||
|
2
sources
2
sources
@ -1 +1 @@
|
|||||||
SHA512 (nftables-0.9.3.tar.bz2) = d264f6fc75c95510e29fe7d5b82ae418d502f40437b098ba6117ffb1374d9989d70a7296e2e58c5fb25142145a987bb9c160902637899f892589809f9541db43
|
SHA512 (nftables-0.9.6.tar.bz2) = ca6524ff1cb1e79d636afeb96f54e4699773e1cbda8e9a3ec5728f4d5b764c0df16b195cdcc0e304ae5643c8761b6b5a6685c737965a7415aec07aeb9f3dc5df
|
||||||
|
Loading…
Reference in New Issue
Block a user