lib/59507: Segmentation fault with nested variables in NPF

[emmankoko519%gmail.com@localhost]

>Number:         59507
>Category:       lib
>Synopsis:       Segmentation fault with nested variables in NPF
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    lib-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Jul 04 11:25:00 +0000 2025
>Originator:     Emmanuel Nyarko
>Release:        NetBSD 10.1
>Organization:
NetBSD
>Environment:
NetBSD 10.1 amd64
>Description:
nested variables in NPF configuration crashes at some nesting level.
>How-To-Repeat:
in /etc/npf.conf
$self={ ifaddrs(wm0), ifaddrs(wm1), ifaddrs(wm2), ifaddrs(lo0) }
$otherip= 192.168.0.1

$clientgroup={ $self, $otherip }

group default {
       block all
       pass stateful final proto tcp from any to any port ssh
       pass stateful final proto tcp from $clientgroup to any
}

run: npfctl validate /etc/npf.conf
>Fix: