From 489d8a95642d508f941167b3b276b40caf6b321b Mon Sep 17 00:00:00 2001 From: JingPiao Chen Date: Sat, 9 Sep 2017 19:10:17 +0800 Subject: [PATCH] tests: check decoding of NFNL_SUBSYS_NFT_COMPAT netlink message types * configure.ac (AC_CHECK_HEADERS): Add linux/netfilter/nf_tables_compat.h. * tests/nfnetlink_nft_compat.c: New file. * tests/gen_tests.in (nfnetlink_nft_compat): New entry. * tests/pure_executables.list: Add nfnetlink_nft_compat. * tests/.gitignore: Likewise. --- configure.ac | 1 + tests/.gitignore | 1 + tests/gen_tests.in | 1 + tests/nfnetlink_nft_compat.c | 83 ++++++++++++++++++++++++++++++++++++ tests/pure_executables.list | 1 + 5 files changed, 87 insertions(+) create mode 100644 tests/nfnetlink_nft_compat.c diff --git a/configure.ac b/configure.ac index 01860092..72aaf6a1 100644 --- a/configure.ac +++ b/configure.ac @@ -400,6 +400,7 @@ AC_CHECK_HEADERS(m4_normalize([ linux/neighbour.h linux/netfilter/ipset/ip_set.h linux/netfilter/nf_tables.h + linux/netfilter/nf_tables_compat.h linux/netfilter/nfnetlink.h linux/netfilter/nfnetlink_acct.h linux/netfilter/nfnetlink_conntrack.h diff --git a/tests/.gitignore b/tests/.gitignore index a876717f..c9277acb 100644 --- a/tests/.gitignore +++ b/tests/.gitignore @@ -224,6 +224,7 @@ nfnetlink_ctnetlink nfnetlink_ctnetlink_exp nfnetlink_cttimeout nfnetlink_ipset +nfnetlink_nft_compat nfnetlink_nftables nfnetlink_osf nfnetlink_queue diff --git a/tests/gen_tests.in b/tests/gen_tests.in index d5fb6940..923e4d94 100644 --- a/tests/gen_tests.in +++ b/tests/gen_tests.in @@ -204,6 +204,7 @@ nfnetlink_ctnetlink +netlink_sock_diag.test nfnetlink_ctnetlink_exp +netlink_sock_diag.test nfnetlink_cttimeout +netlink_sock_diag.test nfnetlink_ipset +netlink_sock_diag.test +nfnetlink_nft_compat +netlink_sock_diag.test nfnetlink_nftables +netlink_sock_diag.test nfnetlink_osf +netlink_sock_diag.test nfnetlink_queue +netlink_sock_diag.test diff --git a/tests/nfnetlink_nft_compat.c b/tests/nfnetlink_nft_compat.c new file mode 100644 index 00000000..ca46470d --- /dev/null +++ b/tests/nfnetlink_nft_compat.c @@ -0,0 +1,83 @@ +/* + * Copyright (c) 2017 JingPiao Chen + * Copyright (c) 2017 The strace developers. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in the + * documentation and/or other materials provided with the distribution. + * 3. The name of the author may not be used to endorse or promote products + * derived from this software without specific prior written permission. + * + * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR + * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES + * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. + * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, + * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT + * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, + * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY + * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT + * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF + * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + */ + +#include "tests.h" + +#ifdef HAVE_LINUX_NETFILTER_NF_TABLES_COMPAT_H + +# include +# include +# include "netlink.h" +# include +# include + +static void +test_nlmsg_type(const int fd) +{ + long rc; + struct nlmsghdr nlh = { + .nlmsg_len = sizeof(nlh), + .nlmsg_flags = NLM_F_REQUEST, + }; + + nlh.nlmsg_type = NFNL_SUBSYS_NFT_COMPAT << 8 | NFNL_MSG_COMPAT_GET; + rc = sendto(fd, &nlh, nlh.nlmsg_len, MSG_DONTWAIT, NULL, 0); + printf("sendto(%d, {len=%u" + ", type=NFNL_SUBSYS_NFT_COMPAT<<8|NFNL_MSG_COMPAT_GET" + ", flags=NLM_F_REQUEST, seq=0, pid=0}" + ", %u, MSG_DONTWAIT, NULL, 0) = %s\n", + fd, nlh.nlmsg_len, nlh.nlmsg_len, sprintrc(rc)); + + nlh.nlmsg_type = NFNL_SUBSYS_NFT_COMPAT << 8 | 0xff; + rc = sendto(fd, &nlh, nlh.nlmsg_len, MSG_DONTWAIT, NULL, 0); + printf("sendto(%d, {len=%u" + ", type=NFNL_SUBSYS_NFT_COMPAT<<8|0xff /* NFNL_MSG_COMPAT_??? */" + ", flags=NLM_F_REQUEST, seq=0, pid=0}" + ", %u, MSG_DONTWAIT, NULL, 0) = %s\n", + fd, nlh.nlmsg_len, nlh.nlmsg_len, sprintrc(rc)); +} + +int +main(void) +{ + skip_if_unavailable("/proc/self/fd/"); + + int fd = create_nl_socket(NETLINK_NETFILTER); + + test_nlmsg_type(fd); + + puts("+++ exited with 0 +++"); + + return 0; +} + +#else + +SKIP_MAIN_UNDEFINED("HAVE_LINUX_NETFILTER_NF_TABLES_COMPAT_H") + +#endif diff --git a/tests/pure_executables.list b/tests/pure_executables.list index a58b7304..c4384daf 100755 --- a/tests/pure_executables.list +++ b/tests/pure_executables.list @@ -185,6 +185,7 @@ nfnetlink_cthelper nfnetlink_ctnetlink nfnetlink_ctnetlink_exp nfnetlink_cttimeout +nfnetlink_nft_compat nfnetlink_nftables nfnetlink_ipset nfnetlink_osf -- 2.40.0