slackware current BUG: nft segfaults when -t arg used

ardya · 12-12-2021, 04:21 PM

When attempting to use terse output mode (-t) nft segfaults, regardless if any sets are defined.

Code:

nft -t list ruleset
table ip filter {
	chain input {
		type filter hook input priority filter; policy drop;
		ct state Segmentation fault

Code:

uname -a
Linux slackware-current.dhcp.ldev 5.15.7 #1 SMP PREEMPT Wed Dec 8 12:53:09 CST 2021 x86_64 Intel(R) Core(TM) i7-6700 CPU @ 3.40GHz GenuineIntel GNU/Linux

slackpkg info nftables
PACKAGE NAME:  nftables-1.0.1-x86_64-1.txz
PACKAGE LOCATION:  ./slackware64/n
PACKAGE SIZE (compressed):  324 K
PACKAGE SIZE (uncompressed):  980 K

drumz · 12-13-2021, 09:10 AM

I can confirm:

Code:

# nft  list ruleset
table inet firewall {
        chain incoming {
                type filter hook input priority filter; policy drop;
                ct state established,related accept
                iifname "lo" accept
                jump bad_packets
                ip daddr 224.0.0.1 drop
                iifname "vboxnet0" ip saddr 192.168.56.0/24 accept
                iifname "vboxnet0" ip daddr 192.168.56.255 accept
                iifname { "eth0", "eth1", "wlan0" } ip protocol tcp jump tcp_inbound
SNIP

Code:

# nft  -t list ruleset
table inet firewall {
        chain incoming {
                type filter hook input priority filter; policy drop;
                ct state established,related accept
                iifname "lo" accept
                jump bad_packets
                ip daddr 224.0.0.1 drop
                iifname "vboxnet0" ip saddr 192.168.56.0/24 accept
                iifname "vboxnet0" ip daddr 192.168.56.255 accept
                iifname Segmentation fault

Is yours segfaulting in a similar place where you use brackets to define multiple things at once? Probably worth reporting upstream.