From f0b32f868a43345c77b3852ed0b3fb0d5856bed4 Mon Sep 17 00:00:00 2001 From: Florian Westphal Date: Mon, 7 Mar 2016 21:05:56 +0100 Subject: nft-test: don't zap remainder of rule after handling a set Don't delete the part after the set, i.e. given chain input { type filter hook input priority 0; policy accept; vlan id { 1, 2, 4, 100, 4095} vlan pcp 1-3 } don't remove the vlan pcp 1-3 part. This exposes following bug: bridge/vlan.t: WARNING: line: 32: 'nft add rule --debug=netlink bridge test-bridge input vlan id { 1, 2, 4, 100, 4095 } vlan pcp 1-3': 'vlan id { 1, 2, 4, 100, 4095 } vlan pcp 1-3' mismatches 'vlan id { 4, 1, 2, 4095, 100} vlan pcp 0-0' We do not shift the range, so on reverse translation we get a 0-0 output. The bug will be fixes in a followup commit. Signed-off-by: Florian Westphal Acked-by: Pablo Neira Ayuso --- tests/py/inet/tcp.t | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'tests/py/inet') diff --git a/tests/py/inet/tcp.t b/tests/py/inet/tcp.t index f99035ed..9618e532 100644 --- a/tests/py/inet/tcp.t +++ b/tests/py/inet/tcp.t @@ -37,7 +37,7 @@ tcp sport 1024 tcp dport 22;ok tcp sport 1024 tcp dport 22 tcp sequence 0;ok tcp sequence 0 tcp sport 1024 tcp dport 22;ok;tcp sport 1024 tcp dport 22 tcp sequence 0 -tcp sequence 0 tcp sport { 1024, 1022} tcp dport 22;ok +tcp sequence 0 tcp sport { 1024, 1022} tcp dport 22;ok;tcp sport { 1022, 1024} tcp dport 22 tcp sequence 0 tcp sequence 22;ok tcp sequence != 233;ok -- cgit v1.2.3