Re: [PATCH ipset 0/5] ipset test updates
Jozsef Kadlecsik <[email protected]> Wed, 29 Jul 2026 17:05:35 +0200 (CEST)
| Newsgroups | gmane.comp.security.firewalls.netfilter.devel |
|---|---|
| Message-ID | <[email protected]> |
Hi Florian, On Thu, 23 Jul 2026, Florian Westphal wrote: > These are extensions to existing test cases, no tests are > disabled and all tests are expected to pass regardless if > the rhashtable patch set is applied or not. > > 1) Introduce IPSET_MACHINE_SLOW to prevent ipset test timeouts on slow > machines. Increase the slack value to 30s when this flag is set. > > 2) Prefer tail -n in hash:net.t tests to avoid Fedora 44 error. > > 3) Use diff -u instead of cmp in tests to improve error readability. > > 4) Add a UaF reproducer to hash:net,iface.t. Verify that deleting > non-existing elements fails without triggering an incorrect free. > > 5) Add a test for CIDR matching with the "multi" flag in match_target.t. Thanks! All patches are applied to the ipset git tree. Best regards, Jozsef > Florian Westphal (5): > tests: check_extensions: introduce and use IPSET_MACHINE_SLOW > tests: hash:net.t: prefer tail -n > tests: prefer diff -u to cmp > tests: hash:net,iface.t: add reproducer for UaF > tests: match_target.t check for proper cidr matching > > tests/check_extensions | 23 +++++++++++++++++++---- > tests/hash:net,iface.t | 5 +++++ > tests/hash:net.t | 2 +- > tests/iphash.t | 8 ++++---- > tests/match_target.t | 14 +++++++++++++- > tests/restore.t | 2 +- > 6 files changed, 43 insertions(+), 11 deletions(-) > > -- > 2.54.0 > -- E-mail : [email protected], [email protected], [email protected] Address: Wigner Research Centre for Physics H-1525 Budapest 114, POB. 49, Hungary