BUG/MEDIUM: acl: always accept match "found"
The pattern match "found" fails to parse on binary type samples. The
reason is that it presents itself as an integer type which bin cannot
be cast into. We must always accept this match since it validates
anything on input regardless of the type. Let's just relax the parser
to accept it.
This problem might also exist in 1.5.
[ note: it affects outputs of types ADDR, IPv6, BIN and METH here ]
(cherry picked from commit 9bb49f6906eafed0eb0fde01cd403089a502a101)
diff --git a/src/acl.c b/src/acl.c
index d8b3000..eb87910 100644
--- a/src/acl.c
+++ b/src/acl.c
@@ -488,7 +488,7 @@
}
/* Note: -m found is always valid, bool/int are compatible, str/bin/reg/len are compatible */
- if (!sample_casts[cur_type][pat_match_types[idx]]) {
+ if (idx != PAT_MATCH_FOUND && !sample_casts[cur_type][pat_match_types[idx]]) {
memprintf(err, "matching method '%s' cannot be used with fetch keyword '%s'", args[1], expr->kw);
goto out_free_expr;
}