From 567937b5560fbcc7f6b74fb43c52e1cab2ac425a Mon Sep 17 00:00:00 2001 From: Florian Westphal Date: Fri, 8 Dec 2023 19:38:33 +0100 Subject: evaluate: fix bogus assertion failure with boolean datatype The assertion is too strict, as found by afl++: typeof iifname . ip saddr . meta ipsec elements = { "eth0" . 10.1.1.2 . 1 } meta ipsec is boolean (1 bit), but datasize of 1 is set at 8 bit. Fixes: 22b750aa6dc9 ("src: allow use of base integer types as set keys in concatenations") Signed-off-by: Florian Westphal --- tests/shell/testcases/sets/dumps/typeof_sets_0.nft | 9 +++++++++ 1 file changed, 9 insertions(+) (limited to 'tests/shell/testcases/sets/dumps') diff --git a/tests/shell/testcases/sets/dumps/typeof_sets_0.nft b/tests/shell/testcases/sets/dumps/typeof_sets_0.nft index 6f5b83af..63fc5b14 100644 --- a/tests/shell/testcases/sets/dumps/typeof_sets_0.nft +++ b/tests/shell/testcases/sets/dumps/typeof_sets_0.nft @@ -55,6 +55,11 @@ table inet t { elements = { 3567 . 1.2.3.4 } } + set s12 { + typeof iifname . ip saddr . meta ipsec + elements = { "eth0" . 10.1.1.2 . exists } + } + chain c1 { osf name @s1 accept } @@ -94,4 +99,8 @@ table inet t { chain c11 { vlan id . ip saddr @s11 accept } + + chain c12 { + iifname . ip saddr . meta ipsec @s12 accept + } } -- cgit v1.2.3