diff options
author | Florian Westphal <fw@strlen.de> | 2024-01-11 18:14:16 +0100 |
---|---|---|
committer | Florian Westphal <fw@strlen.de> | 2024-01-11 21:34:08 +0100 |
commit | 4121175cc243a15bdb8c226a335f67cedd98680e (patch) | |
tree | c927d7425e7f3d9158e80477b31fb5b13d5ac597 /tests/shell/testcases | |
parent | 1d03ab5267bdbc7c0bcb041efaad42a462fdeb5f (diff) |
evaluate: add missing range checks for dup,fwd and payload statements
Else we assert with:
BUG: unknown expression type range
nft: src/netlink_linearize.c:912: netlink_gen_expr: Assertion `0' failed.
While at it, condense meta and exthdr to reuse the same helper.
Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'tests/shell/testcases')
-rw-r--r-- | tests/shell/testcases/bogons/nft-f/dup_fwd_ranges | 14 | ||||
-rw-r--r-- | tests/shell/testcases/bogons/nft-f/unknown_expr_type_range_assert | 8 |
2 files changed, 19 insertions, 3 deletions
diff --git a/tests/shell/testcases/bogons/nft-f/dup_fwd_ranges b/tests/shell/testcases/bogons/nft-f/dup_fwd_ranges new file mode 100644 index 00000000..efaff9e5 --- /dev/null +++ b/tests/shell/testcases/bogons/nft-f/dup_fwd_ranges @@ -0,0 +1,14 @@ +define dev = "1"-"2" + +table netdev t { + chain c { + fwd to 1-2 + dup to 1-2 + } +} + +table ip t { + chain c { + dup to 1-2 device $dev + } +} diff --git a/tests/shell/testcases/bogons/nft-f/unknown_expr_type_range_assert b/tests/shell/testcases/bogons/nft-f/unknown_expr_type_range_assert index 234dd623..e6206736 100644 --- a/tests/shell/testcases/bogons/nft-f/unknown_expr_type_range_assert +++ b/tests/shell/testcases/bogons/nft-f/unknown_expr_type_range_assert @@ -1,5 +1,7 @@ table ip x { - chain k { - meta mark set 0x001-3434 - } + chain k { + meta mark set 0x001-3434 + ct mark set 0x001-3434 + tcp dport set 1-3 + } } |