From 1d03ab5267bdbc7c0bcb041efaad42a462fdeb5f Mon Sep 17 00:00:00 2001 From: Florian Westphal Date: Thu, 11 Jan 2024 18:14:15 +0100 Subject: evaluate: tproxy: move range error checks after arg evaluation Testing for range before evaluation will still crash us later during netlink linearization, prefixes turn into ranges, symbolic expression might hide a range/prefix. So move this after the argument has been evaluated. Signed-off-by: Florian Westphal --- tests/shell/testcases/bogons/nft-f/tproxy_ranges | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 tests/shell/testcases/bogons/nft-f/tproxy_ranges (limited to 'tests/shell/testcases/bogons/nft-f/tproxy_ranges') diff --git a/tests/shell/testcases/bogons/nft-f/tproxy_ranges b/tests/shell/testcases/bogons/nft-f/tproxy_ranges new file mode 100644 index 00000000..1230860e --- /dev/null +++ b/tests/shell/testcases/bogons/nft-f/tproxy_ranges @@ -0,0 +1,8 @@ +define range = 42-80 + +table t { + chain c { + tcp dport 42 tproxy to 192.168.0.1:$range + tcp dport 42 tproxy to 192.168.0.0/16 + } +} -- cgit v1.2.3