tests: shell: coverage for simple verdict map merger

Add a testcase to cover for merging two rules into verdict map, added by

  345d9260f7fe ("optimize: merge several selectors with different verdict into verdict map").

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

diff --git a/tests/shell/testcases/optimizations/dumps/merge_vmap.nft b/tests/shell/testcases/optimizations/dumps/merge_vmap.nft
new file mode 100644 (file)
index 0000000..2c25352
--- /dev/null
+++ b/tests/shell/testcases/optimizations/dumps/merge_vmap.nft
@@ -0,0 +1,5 @@
+table ip x {
+       chain y {
+               ip saddr . ip daddr vmap { 1.1.1.1 . 2.2.2.2 : accept, 2.2.2.2 . 3.3.3.3 : drop }
+       }
+}

diff --git a/tests/shell/testcases/optimizations/merge_vmap b/tests/shell/testcases/optimizations/merge_vmap
new file mode 100644 (file)
index 0000000..5d4454c
--- /dev/null
+++ b/tests/shell/testcases/optimizations/merge_vmap
@@ -0,0 +1,13 @@
+#!/bin/bash
+
+set -e
+
+RULESET="table ip x {
+       chain y {
+               ip saddr 1.1.1.1 ip daddr 2.2.2.2 accept
+               ip saddr 2.2.2.2 ip daddr 3.3.3.3 drop
+       }
+}"
+
+# check that optimizer output displays vmap in the listing
+$NFT -o -f - <<< $RULESET 2>&1 | grep vmap