nat: T9162: fix KeyError when show nat rules has no inbound-interface

_get_formatted_output_rules() and _get_formatted_output_statistics()
detected an interface match by checking whether *any* expr in the rule
has a left.meta field, then unconditionally read expr[0]'s match.right
as the interface. Both assumptions are wrong: meta is also used for
non-interface matches (e.g. meta l4proto from a protocol match), and
the interface match is not guaranteed to be first. For a rule with a
protocol match but no inbound-interface, this read the address/port
match's right-hand side (a dict) as if it were the interface string,
raising KeyError: 0 on interface[0] instead of falling back to 'any'.

Search expr entries explicitly for a left.meta.key == 'iifname' match
instead, and guard the '@' set-name stripping with a type check.

0 files changed, 0 insertions, 0 deletions