Comment 1 for bug 1965464

Revision history for this message
Steve Beattie (sbeattie) wrote :

One concern with this is that the upstream symbol versioning is broken; generating the debian symbols file looks like so:

libnftables.so.1 libnftables1 #MINVER#
 nft_ctx_add_include_path@Base 0.9.2
 nft_ctx_add_var@Base 1.0.0
 nft_ctx_buffer_error@Base 0.9.2
 nft_ctx_buffer_output@Base 0.9.2
 nft_ctx_clear_include_paths@Base 0.9.2
 nft_ctx_clear_vars@Base 1.0.0
 nft_ctx_free@Base 0.9.2
 nft_ctx_get_dry_run@Base 0.9.2
 nft_ctx_get_error_buffer@Base 0.9.2
 nft_ctx_get_optimize@Base 1.0.2
 nft_ctx_get_output_buffer@Base 0.9.2
 nft_ctx_new@Base 0.9.2
 nft_ctx_output_get_debug@Base 0.9.2
 nft_ctx_output_get_flags@Base 0.9.2
 nft_ctx_output_set_debug@Base 0.9.2
 nft_ctx_output_set_flags@Base 0.9.2
 nft_ctx_set_dry_run@Base 0.9.2
 nft_ctx_set_error@Base 0.9.2
 nft_ctx_set_optimize@Base 1.0.2
 nft_ctx_set_output@Base 0.9.2
 nft_ctx_unbuffer_error@Base 0.9.2
 nft_ctx_unbuffer_output@Base 0.9.2
 nft_run_cmd_from_buffer@Base 0.9.2
 nft_run_cmd_from_filename@Base 0.9.2

@Base is used because of:
$ nm -D --with-symbol-versions --defined-only /usr/lib/x86_64-linux-gnu/libnftables.so.1.1.0
000000000005ad10 T nft_ctx_add_include_path
000000000005abe0 T nft_ctx_add_var
000000000005b150 T nft_ctx_buffer_error
000000000005b050 T nft_ctx_buffer_output
000000000005ad90 T nft_ctx_clear_include_paths
000000000005acb0 T nft_ctx_clear_vars
000000000005b2e0 T nft_ctx_free
000000000005b590 T nft_ctx_get_dry_run
000000000005b2a0 T nft_ctx_get_error_buffer
000000000005b5b0 T nft_ctx_get_optimize
000000000005b270 T nft_ctx_get_output_buffer
000000000005add0 T nft_ctx_new
000000000005b5f0 T nft_ctx_output_get_debug
000000000005b5d0 T nft_ctx_output_get_flags
000000000005b600 T nft_ctx_output_set_debug
000000000005b5e0 T nft_ctx_output_set_flags
000000000005b5a0 T nft_ctx_set_dry_run
000000000005b550 T nft_ctx_set_error
000000000005b5c0 T nft_ctx_set_optimize
000000000005b510 T nft_ctx_set_output
000000000005b200 T nft_ctx_unbuffer_error
000000000005b0f0 T nft_ctx_unbuffer_output
000000000005b610 T nft_run_cmd_from_buffer
000000000005b960 T nft_run_cmd_from_filename

This despite the symbol map in the upstream project: https://git.netfilter.org/nftables/tree/src/libnftables.map