diff options
author | Pablo Neira Ayuso <pablo@netfilter.org> | 2021-08-26 12:24:37 +0200 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2021-08-26 23:08:14 +0200 |
commit | 567ea4774e13b1f3b06f42c74b9bd32453d70164 (patch) | |
tree | 147e68dc5721430e8089e705b2089057adea848c /tests/py/ip | |
parent | 058a943cefbdde9aee273115624de27cf15dd3f3 (diff) |
netlink_delinearize: incorrect meta protocol dependency kill
meta protocol is meaningful in bridge, netdev and inet families, do
not remove this.
Fixes: 056aaa3e6dc6 ("netlink_delinearize: Refactor meta_may_dependency_kill()")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tests/py/ip')
-rw-r--r-- | tests/py/ip/meta.t | 2 | ||||
-rw-r--r-- | tests/py/ip/meta.t.json | 16 | ||||
-rw-r--r-- | tests/py/ip/meta.t.payload | 9 |
3 files changed, 27 insertions, 0 deletions
diff --git a/tests/py/ip/meta.t b/tests/py/ip/meta.t index f733d22d..fecd0caf 100644 --- a/tests/py/ip/meta.t +++ b/tests/py/ip/meta.t @@ -8,6 +8,8 @@ meta l4proto ipv6-icmp icmpv6 type nd-router-advert;ok;icmpv6 type nd-router-adv meta l4proto 58 icmpv6 type nd-router-advert;ok;icmpv6 type nd-router-advert icmpv6 type nd-router-advert;ok +meta protocol ip udp dport 67;ok + meta ibrname "br0";fail meta obrname "br0";fail diff --git a/tests/py/ip/meta.t.json b/tests/py/ip/meta.t.json index f83864f6..3df31ce3 100644 --- a/tests/py/ip/meta.t.json +++ b/tests/py/ip/meta.t.json @@ -140,3 +140,19 @@ "accept": null } ] + +# meta protocol ip udp dport 67 +[ + { + "match": { + "left": { + "payload": { + "field": "dport", + "protocol": "udp" + } + }, + "op": "==", + "right": 67 + } + } +] diff --git a/tests/py/ip/meta.t.payload b/tests/py/ip/meta.t.payload index 7bc69a29..a1fd0086 100644 --- a/tests/py/ip/meta.t.payload +++ b/tests/py/ip/meta.t.payload @@ -44,3 +44,12 @@ ip6 test-ip4 input [ meta load sdifname => reg 1 ] [ cmp neq reg 1 0x31667276 0x00000000 0x00000000 0x00000000 ] [ immediate reg 0 accept ] + +# meta protocol ip udp dport 67 +ip test-ip4 input + [ meta load protocol => reg 1 ] + [ cmp eq reg 1 0x00000008 ] + [ meta load l4proto => reg 1 ] + [ cmp eq reg 1 0x00000011 ] + [ payload load 2b @ transport header + 2 => reg 1 ] + [ cmp eq reg 1 0x00004300 ] |