diff options
| author | Phil Sutter <phil@nwl.cc> | 2024-01-25 18:14:23 +0100 |
|---|---|---|
| committer | Phil Sutter <phil@nwl.cc> | 2024-02-02 18:26:14 +0100 |
| commit | 9d41421a887f4bc4b3ba10174cf43ee2c6b76956 (patch) | |
| tree | e55bad97d6fdcd59ff83be8e045d92c0f978345b /extensions | |
| parent | 30a7f11234a81bd2389c7e7224769b1fdd192239 (diff) | |
libxtables: Reject negative port ranges
Analogous to XTTYPE_UINT*RC value parsing, assert consecutive port
values are not lower than previous ones.
Signed-off-by: Phil Sutter <phil@nwl.cc>
Diffstat (limited to 'extensions')
| -rw-r--r-- | extensions/libxt_conntrack.t | 8 | ||||
| -rw-r--r-- | extensions/libxt_dccp.t | 4 | ||||
| -rw-r--r-- | extensions/libxt_udp.t | 4 |
3 files changed, 8 insertions, 8 deletions
diff --git a/extensions/libxt_conntrack.t b/extensions/libxt_conntrack.t index 620e7b54..5e27ddce 100644 --- a/extensions/libxt_conntrack.t +++ b/extensions/libxt_conntrack.t @@ -34,22 +34,22 @@ -m conntrack --ctorigsrcport 4:;-m conntrack --ctorigsrcport 4:65535;OK -m conntrack --ctorigsrcport 3:4;=;OK -m conntrack --ctorigsrcport 4:4;-m conntrack --ctorigsrcport 4;OK --m conntrack --ctorigsrcport 4:3;=;OK +-m conntrack --ctorigsrcport 4:3;;FAIL -m conntrack --ctreplsrcport :;-m conntrack --ctreplsrcport 0:65535;OK -m conntrack --ctreplsrcport :4;-m conntrack --ctreplsrcport 0:4;OK -m conntrack --ctreplsrcport 4:;-m conntrack --ctreplsrcport 4:65535;OK -m conntrack --ctreplsrcport 3:4;=;OK -m conntrack --ctreplsrcport 4:4;-m conntrack --ctreplsrcport 4;OK --m conntrack --ctreplsrcport 4:3;=;OK +-m conntrack --ctreplsrcport 4:3;;FAIL -m conntrack --ctorigdstport :;-m conntrack --ctorigdstport 0:65535;OK -m conntrack --ctorigdstport :4;-m conntrack --ctorigdstport 0:4;OK -m conntrack --ctorigdstport 4:;-m conntrack --ctorigdstport 4:65535;OK -m conntrack --ctorigdstport 3:4;=;OK -m conntrack --ctorigdstport 4:4;-m conntrack --ctorigdstport 4;OK --m conntrack --ctorigdstport 4:3;=;OK +-m conntrack --ctorigdstport 4:3;;FAIL -m conntrack --ctrepldstport :;-m conntrack --ctrepldstport 0:65535;OK -m conntrack --ctrepldstport :4;-m conntrack --ctrepldstport 0:4;OK -m conntrack --ctrepldstport 4:;-m conntrack --ctrepldstport 4:65535;OK -m conntrack --ctrepldstport 3:4;=;OK -m conntrack --ctrepldstport 4:4;-m conntrack --ctrepldstport 4;OK --m conntrack --ctrepldstport 4:3;=;OK +-m conntrack --ctrepldstport 4:3;;FAIL diff --git a/extensions/libxt_dccp.t b/extensions/libxt_dccp.t index 535891a5..3655ab6f 100644 --- a/extensions/libxt_dccp.t +++ b/extensions/libxt_dccp.t @@ -10,12 +10,12 @@ -p dccp -m dccp --sport :4;-p dccp -m dccp --sport 0:4;OK -p dccp -m dccp --sport 4:;-p dccp -m dccp --sport 4:65535;OK -p dccp -m dccp --sport 4:4;-p dccp -m dccp --sport 4;OK --p dccp -m dccp --sport 4:3;=;OK +-p dccp -m dccp --sport 4:3;;FAIL -p dccp -m dccp --dport :;-p dccp -m dccp --dport 0:65535;OK -p dccp -m dccp --dport :4;-p dccp -m dccp --dport 0:4;OK -p dccp -m dccp --dport 4:;-p dccp -m dccp --dport 4:65535;OK -p dccp -m dccp --dport 4:4;-p dccp -m dccp --dport 4;OK --p dccp -m dccp --dport 4:3;=;OK +-p dccp -m dccp --dport 4:3;;FAIL -p dccp -m dccp ! --sport 1;=;OK -p dccp -m dccp ! --sport 65535;=;OK -p dccp -m dccp ! --dport 1;=;OK diff --git a/extensions/libxt_udp.t b/extensions/libxt_udp.t index d62dd5e3..09dff363 100644 --- a/extensions/libxt_udp.t +++ b/extensions/libxt_udp.t @@ -11,13 +11,13 @@ -p udp -m udp --sport :4;-p udp -m udp --sport 0:4;OK -p udp -m udp --sport 4:;-p udp -m udp --sport 4:65535;OK -p udp -m udp --sport 4:4;-p udp -m udp --sport 4;OK --p udp -m udp --sport 4:3;=;OK +-p udp -m udp --sport 4:3;;FAIL -p udp -m udp --dport :;-p udp -m udp;OK -p udp -m udp ! --dport :;-p udp -m udp;OK;LEGACY;-p udp -p udp -m udp --dport :4;-p udp -m udp --dport 0:4;OK -p udp -m udp --dport 4:;-p udp -m udp --dport 4:65535;OK -p udp -m udp --dport 4:4;-p udp -m udp --dport 4;OK --p udp -m udp --dport 4:3;=;OK +-p udp -m udp --dport 4:3;;FAIL -p udp -m udp ! --sport 1;=;OK -p udp -m udp ! --sport 65535;=;OK -p udp -m udp ! --dport 1;=;OK |