diff options
| author | Florian Westphal <fw@strlen.de> | 2017-03-15 14:21:56 +0100 |
|---|---|---|
| committer | Florian Westphal <fw@strlen.de> | 2017-03-16 10:10:05 +0100 |
| commit | 8d9e663e64be13edc6192e8b2d756c391709d4ca (patch) | |
| tree | 248b127e0fa75da4eb0ac37d640cdc25bbbfa6f1 | |
| parent | 8675f943e7eff24f29aaa492cb58267f9291de31 (diff) | |
tests: add insert-failure test
It should not be possible to add a ip6 restricted helper to ip family.
Signed-off-by: Florian Westphal <fw@strlen.de>
Acked-by: Pablo Neira Ayuso <pablo@netfilter.org>
| -rw-r--r-- | tests/py/ip/objects.t | 1 | ||||
| -rwxr-xr-x | tests/py/nft-test.py | 17 |
2 files changed, 15 insertions, 3 deletions
diff --git a/tests/py/ip/objects.t b/tests/py/ip/objects.t index ec8e8fd9..742ec6af 100644 --- a/tests/py/ip/objects.t +++ b/tests/py/ip/objects.t @@ -6,6 +6,7 @@ %cnt2 type counter;ok %qt1 type quota 25 mbytes;ok %qt2 type quota over 1 kbytes;ok +%cthelp2 type ct helper { type \"ftp\" protocol tcp\; l3proto ip6\; };fail ip saddr 192.168.1.3 counter name "cnt2";ok ip saddr 192.168.1.3 counter name "cnt3";fail diff --git a/tests/py/nft-test.py b/tests/py/nft-test.py index b2240407..8d1df3bc 100755 --- a/tests/py/nft-test.py +++ b/tests/py/nft-test.py @@ -517,12 +517,23 @@ def obj_add(o, test_result, filename, lineno): print_error(reason, filename, lineno) return -1 - if not _obj_exist(o, filename, lineno): - reason = "I have just added the " + obj_handle + \ - " to the table " + table.name + " but it does not exist" + exist = _obj_exist(o, filename, lineno) + + if exist: + if test_result == "ok": + return 0 + reason = "I added the " + obj_handle + \ + " to the table " + table.name + " but it should have failed" print_error(reason, filename, lineno) return -1 + if test_result == "fail": + return 0 + + reason = "I have just added the " + obj_handle + \ + " to the table " + table.name + " but it does not exist" + print_error(reason, filename, lineno) + return -1 def obj_delete(table, filename=None, lineno=None): ''' |