From dd98af599516806e2eb3e1186d0ad52ce7c6b4b5 Mon Sep 17 00:00:00 2001 From: Phil Sutter Date: Tue, 21 Apr 2020 14:10:53 +0200 Subject: [PATCH] tests: shell: Test -F in dump files While not really useful, iptables-nft-restore shouldn't segfault either. This tests the problem described in nfbz#1407. Signed-off-by: Phil Sutter (cherry picked from commit f2ace0cdf25a5911ac84015829d65d6050a5e82d) Signed-off-by: Phil Sutter --- .../tests/shell/testcases/ipt-restore/0012-dash-F_0 | 12 ++++++++++++ 1 file changed, 12 insertions(+) create mode 100755 iptables/tests/shell/testcases/ipt-restore/0012-dash-F_0 diff --git a/iptables/tests/shell/testcases/ipt-restore/0012-dash-F_0 b/iptables/tests/shell/testcases/ipt-restore/0012-dash-F_0 new file mode 100755 index 0000000000000..fd82afa1bc8ce --- /dev/null +++ b/iptables/tests/shell/testcases/ipt-restore/0012-dash-F_0 @@ -0,0 +1,12 @@ +#!/bin/bash -e + +# make sure -F lines don't cause segfaults + +RULESET='*nat +-F PREROUTING +-A PREROUTING -j ACCEPT +-F PREROUTING +COMMIT' + +echo -e "$RULESET" | $XT_MULTI iptables-restore +echo -e "$RULESET" | $XT_MULTI iptables-restore -n -- 2.27.0