@@ -1100,7 +1100,7 @@ static int netlink_add_set_compat(struct netlink_ctx *ctx,
nft_set_attr_set_u32(nls, NFT_SET_ATTR_KEY_TYPE,
dtype_map_to_kernel(set->keytype));
nft_set_attr_set_u32(nls, NFT_SET_ATTR_KEY_LEN,
- set->keylen / BITS_PER_BYTE);
+ div_round_up(set->keylen, BITS_PER_BYTE));
if (set->flags & NFT_SET_MAP) {
nft_set_attr_set_u32(nls, NFT_SET_ATTR_DATA_TYPE,
dtype_map_to_kernel(set->datatype));
@@ -1135,7 +1135,7 @@ static int netlink_add_set_batch(struct netlink_ctx *ctx,
nft_set_attr_set_u32(nls, NFT_SET_ATTR_KEY_TYPE,
dtype_map_to_kernel(set->keytype));
nft_set_attr_set_u32(nls, NFT_SET_ATTR_KEY_LEN,
- set->keylen / BITS_PER_BYTE);
+ div_round_up(set->keylen, BITS_PER_BYTE));
if (set->flags & NFT_SET_MAP) {
nft_set_attr_set_u32(nls, NFT_SET_ATTR_DATA_TYPE,
dtype_map_to_kernel(set->datatype));
If key is e.g. 12 bits, pretend its 16 instead of 8. This is needed to make sets work with header fields with size not divisible by 8. Signed-off-by: Florian Westphal <fw@strlen.de> --- src/netlink.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)