Re: [PATCH nft] evaluate: fix crash if we add an error format rule

2016-05-14 Thread Florian Westphal
Liping Zhang wrote: > If we add a such nft rule: > nft add rule filter input ip protocol icmp tcp dport 0 > > we will always meet the assert condition: > nft: evaluate.c:536: resolve_protocol_conflict: Assertion `base < > (__PROTO_BASE_MAX - 1)' failed. > Aborted (core

[PATCH nft] evaluate: fix crash if we add an error format rule

2016-05-14 Thread Liping Zhang
From: Liping Zhang If we add a such nft rule: nft add rule filter input ip protocol icmp tcp dport 0 we will always meet the assert condition: nft: evaluate.c:536: resolve_protocol_conflict: Assertion `base < (__PROTO_BASE_MAX - 1)' failed. Aborted (core