On 2023-03-28, at 17:27:21 +0200, Florian Westphal wrote: > Jeremy Sowden wrote: > > Iptables supports the matching of DCCP packets based on the presence > > or absence of DCCP options. Extend exthdr expressions to add this > > functionality to nftables. > > > > Link: https://bugzilla.netfilter.org/show_bug.cgi?id=930 > > Signed-off-by: Jeremy Sowden > > LGTM, thanks. Cool. I've just spotted a data-type ref-count bug. In `dccp_init_raw`: expr->dtype = &boolean_type; should be: datatype_set(expr, &boolean_type); I'll send a new version with that fixed. I think there are a few more instances of this sort, so I'll send a follow-up patch for those. J.