May be empty, content might be yet unknown, we can do any transfer in
this case.

Closes: https://bugzilla.netfilter.org/show_bug.cgi?id=1327
Signed-off-by: Pablo Neira Ayuso <[email protected]>
---
Will try to scratch time to make a test for this, otherwise anyone sending
patches to extend to coverage for this, it would be great.

 src/evaluate.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/evaluate.c b/src/evaluate.c
index 54afc3340186..94377da99335 100644
--- a/src/evaluate.c
+++ b/src/evaluate.c
@@ -1606,6 +1606,9 @@ static int __binop_transfer(struct eval_ctx *ctx,
                }
                break;
        case EXPR_SET_REF:
+               if (!((*right)->set->flags & NFT_SET_ANONYMOUS))
+                       return 0;
+
                return __binop_transfer(ctx, left, &(*right)->set->init);
        default:
                return 0;
-- 
2.11.0

Reply via email to