Re: [PATCH ipset 0/5] ipset test updates

Jozsef Kadlecsik <[email protected]> Wed, 29 Jul 2026 17:05:35 +0200 (CEST)
Newsgroups gmane.comp.security.firewalls.netfilter.devel
Message-ID <[email protected]>
Hi Florian,

On Thu, 23 Jul 2026, Florian Westphal wrote:

> These are extensions to existing test cases, no tests are
> disabled and all tests are expected to pass regardless if
> the rhashtable patch set is applied or not.
> 
> 1) Introduce IPSET_MACHINE_SLOW to prevent ipset test timeouts on slow
> machines. Increase the slack value to 30s when this flag is set.
> 
> 2) Prefer tail -n in hash:net.t tests to avoid Fedora 44 error.
> 
> 3) Use diff -u instead of cmp in tests to improve error readability.
> 
> 4) Add a UaF reproducer to hash:net,iface.t. Verify that deleting
> non-existing elements fails without triggering an incorrect free.
> 
> 5) Add a test for CIDR matching with the "multi" flag in match_target.t.

Thanks! All patches are applied to the ipset git tree.

Best regards,
Jozsef

> Florian Westphal (5):
>   tests: check_extensions: introduce and use IPSET_MACHINE_SLOW
>   tests: hash:net.t: prefer tail -n
>   tests: prefer diff -u to cmp
>   tests: hash:net,iface.t: add reproducer for UaF
>   tests: match_target.t check for proper cidr matching
> 
>  tests/check_extensions | 23 +++++++++++++++++++----
>  tests/hash:net,iface.t |  5 +++++
>  tests/hash:net.t       |  2 +-
>  tests/iphash.t         |  8 ++++----
>  tests/match_target.t   | 14 +++++++++++++-
>  tests/restore.t        |  2 +-
>  6 files changed, 43 insertions(+), 11 deletions(-)
> 
> -- 
> 2.54.0
> 

-- 
E-mail : [email protected], [email protected], [email protected]
Address: Wigner Research Centre for Physics
         H-1525 Budapest 114, POB. 49, Hungary