[PATCH ipset 0/5] ipset test updates

Florian Westphal <[email protected]> Thu, 23 Jul 2026 12:34:59 +0200
Newsgroups gmane.comp.security.firewalls.netfilter.devel
Message-ID <[email protected]>
These are extensions to existing test cases, no tests are
disabled and all tests are expected to pass regardless if
the rhashtable patch set is applied or not.

1) Introduce IPSET_MACHINE_SLOW to prevent ipset test timeouts on slow
machines. Increase the slack value to 30s when this flag is set.

2) Prefer tail -n in hash:net.t tests to avoid Fedora 44 error.

3) Use diff -u instead of cmp in tests to improve error readability.

4) Add a UaF reproducer to hash:net,iface.t. Verify that deleting
non-existing elements fails without triggering an incorrect free.

5) Add a test for CIDR matching with the "multi" flag in match_target.t.

Florian Westphal (5):
  tests: check_extensions: introduce and use IPSET_MACHINE_SLOW
  tests: hash:net.t: prefer tail -n
  tests: prefer diff -u to cmp
  tests: hash:net,iface.t: add reproducer for UaF
  tests: match_target.t check for proper cidr matching

 tests/check_extensions | 23 +++++++++++++++++++----
 tests/hash:net,iface.t |  5 +++++
 tests/hash:net.t       |  2 +-
 tests/iphash.t         |  8 ++++----
 tests/match_target.t   | 14 +++++++++++++-
 tests/restore.t        |  2 +-
 6 files changed, 43 insertions(+), 11 deletions(-)

-- 
2.54.0