Skip to content

Commit b847532

Browse files
Florian Westphalgregkh
authored andcommitted
selftests: nft_concat_range: add test for reload with no element add/del
commit eda0cf1 upstream. Add a specific test for the reload issue fixed with commit 23c5426 ("netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone"). Add to set, then flush set content + restore without other add/remove in the transaction. On kernels before the fix, this test case fails: net,mac with reload [FAIL] Signed-off-by: Florian Westphal <fw@strlen.de> Reviewed-by: Stefano Brivio <sbrivio@redhat.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
1 parent 7c0ee51 commit b847532

1 file changed

Lines changed: 71 additions & 1 deletion

File tree

tools/testing/selftests/netfilter/nft_concat_range.sh

Lines changed: 71 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ TYPES="net_port port_net net6_port port_proto net6_port_mac net6_port_mac_proto
2727
net_port_mac_proto_net"
2828

2929
# Reported bugs, also described by TYPE_ variables below
30-
BUGS="flush_remove_add"
30+
BUGS="flush_remove_add reload"
3131

3232
# List of possible paths to pktgen script from kernel tree for performance tests
3333
PKTGEN_SCRIPT_PATHS="
@@ -337,6 +337,23 @@ TYPE_flush_remove_add="
337337
display Add two elements, flush, re-add
338338
"
339339

340+
TYPE_reload="
341+
display net,mac with reload
342+
type_spec ipv4_addr . ether_addr
343+
chain_spec ip daddr . ether saddr
344+
dst addr4
345+
src mac
346+
start 1
347+
count 1
348+
src_delta 2000
349+
tools sendip nc bash
350+
proto udp
351+
352+
race_repeat 0
353+
354+
perf_duration 0
355+
"
356+
340357
# Set template for all tests, types and rules are filled in depending on test
341358
set_template='
342359
flush ruleset
@@ -1455,6 +1472,59 @@ test_bug_flush_remove_add() {
14551472
nft flush ruleset
14561473
}
14571474

1475+
# - add ranged element, check that packets match it
1476+
# - reload the set, check packets still match
1477+
test_bug_reload() {
1478+
setup veth send_"${proto}" set || return ${KSELFTEST_SKIP}
1479+
rstart=${start}
1480+
1481+
range_size=1
1482+
for i in $(seq "${start}" $((start + count))); do
1483+
end=$((start + range_size))
1484+
1485+
# Avoid negative or zero-sized port ranges
1486+
if [ $((end / 65534)) -gt $((start / 65534)) ]; then
1487+
start=${end}
1488+
end=$((end + 1))
1489+
fi
1490+
srcstart=$((start + src_delta))
1491+
srcend=$((end + src_delta))
1492+
1493+
add "$(format)" || return 1
1494+
range_size=$((range_size + 1))
1495+
start=$((end + range_size))
1496+
done
1497+
1498+
# check kernel does allocate pcpu sctrach map
1499+
# for reload with no elemet add/delete
1500+
( echo flush set inet filter test ;
1501+
nft list set inet filter test ) | nft -f -
1502+
1503+
start=${rstart}
1504+
range_size=1
1505+
1506+
for i in $(seq "${start}" $((start + count))); do
1507+
end=$((start + range_size))
1508+
1509+
# Avoid negative or zero-sized port ranges
1510+
if [ $((end / 65534)) -gt $((start / 65534)) ]; then
1511+
start=${end}
1512+
end=$((end + 1))
1513+
fi
1514+
srcstart=$((start + src_delta))
1515+
srcend=$((end + src_delta))
1516+
1517+
for j in $(seq ${start} $((range_size / 2 + 1)) ${end}); do
1518+
send_match "${j}" $((j + src_delta)) || return 1
1519+
done
1520+
1521+
range_size=$((range_size + 1))
1522+
start=$((end + range_size))
1523+
done
1524+
1525+
nft flush ruleset
1526+
}
1527+
14581528
test_reported_issues() {
14591529
eval test_bug_"${subtest}"
14601530
}

0 commit comments

Comments
 (0)