diff options
author | Pablo Neira Ayuso <pablo@netfilter.org> | 2023-11-22 20:35:07 +0100 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2023-11-22 22:00:44 +0100 |
commit | faa6908fad6053ae9549c45b88d0402cc69cf1ed (patch) | |
tree | c65df90f6d4f7a597625654b1b1b73edb2a45774 /tests/shell/testcases/maps/vmap_unary | |
parent | 7a6089a400a573b9a4fd92f29c00a6be7b8ef269 (diff) |
evaluate: clone unary expression datatype to deal with dynamic datatype
When allocating a unary expression, clone the datatype to deal with
dynamic datatypes.
Fixes: 6b01bb9ff798 ("datatype: concat expression only releases dynamically allocated datatype")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tests/shell/testcases/maps/vmap_unary')
-rwxr-xr-x | tests/shell/testcases/maps/vmap_unary | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/tests/shell/testcases/maps/vmap_unary b/tests/shell/testcases/maps/vmap_unary new file mode 100755 index 00000000..4038d1c1 --- /dev/null +++ b/tests/shell/testcases/maps/vmap_unary @@ -0,0 +1,17 @@ +#!/bin/bash + +set -e + +RULESET="table ip filter { + map ipsec_in { + typeof ipsec in reqid . iif : verdict + flags interval + } + + chain INPUT { + type filter hook input priority 0; policy drop + ipsec in reqid . iif vmap @ipsec_in + } +}" + +$NFT -f - <<< $RULESET |