From 0f18144f2d775e7a11c158e5123725e41fbaed0f Mon Sep 17 00:00:00 2001 From: kp Date: Sat, 2 Mar 2019 12:30:59 +0000 Subject: [PATCH] pf tests: Test for nested inline anchor issue PR: 196314 MFC after: 1 week --- tests/sys/netpfil/pf/pass_block.sh | 36 ++++++++++++++++++++++++++++++ 1 file changed, 36 insertions(+) diff --git a/tests/sys/netpfil/pf/pass_block.sh b/tests/sys/netpfil/pf/pass_block.sh index d7a41b98f2c..14c26b6d5f0 100755 --- a/tests/sys/netpfil/pf/pass_block.sh +++ b/tests/sys/netpfil/pf/pass_block.sh @@ -129,9 +129,45 @@ noalias_cleanup() pft_cleanup } +atf_test_case "nested_inline" "cleanup" +nested_inline_head() +{ + atf_set descr "Test nested inline anchors, PR196314" + atf_set require.user root +} + +nested_inline_body() +{ + pft_init + + epair=$(vnet_mkepair) + ifconfig ${epair}a inet 192.0.2.1/24 up + + vnet_mkjail alcatraz ${epair}b + jexec alcatraz ifconfig ${epair}b 192.0.2.2/24 up + + jexec alcatraz pfctl -e + pft_set_rules alcatraz \ + "block in" \ + "anchor \"an1\" {" \ + "pass in quick proto tcp to port time" \ + "anchor \"an2\" {" \ + "pass in quick proto icmp" \ + "}" \ + "}" + + atf_check -s exit:0 -o ignore ping -c 1 -t 1 192.0.2.2 +} + +nested_inline_cleanup() +{ + pft_cleanup +} + atf_init_test_cases() { atf_add_test_case "v4" atf_add_test_case "v6" atf_add_test_case "noalias" + atf_add_test_case "nested_inline" } -- 2.45.0