From: Pablo Neira Ayuso <pablo@netfilter.org>
Date: Wed, 20 Aug 2025 11:17:22 +0000 (+0200)
Subject: tests: shell: coverage for simple verdict map merger
X-Git-Tag: v1.1.5~8
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=4c5ffeda4df41f6b0d7effa6167b20c6e2376e9f;p=thirdparty%2Fnftables.git

tests: shell: coverage for simple verdict map merger

Add a testcase to cover for merging two rules into verdict map, added by

  345d9260f7fe ("optimize: merge several selectors with different verdict into verdict map").

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
---

diff --git a/tests/shell/testcases/optimizations/dumps/merge_vmap.nft b/tests/shell/testcases/optimizations/dumps/merge_vmap.nft
new file mode 100644
index 00000000..2c253526
--- /dev/null
+++ b/tests/shell/testcases/optimizations/dumps/merge_vmap.nft
@@ -0,0 +1,5 @@
+table ip x {
+	chain y {
+		ip saddr . ip daddr vmap { 1.1.1.1 . 2.2.2.2 : accept, 2.2.2.2 . 3.3.3.3 : drop }
+	}
+}
diff --git a/tests/shell/testcases/optimizations/merge_vmap b/tests/shell/testcases/optimizations/merge_vmap
new file mode 100644
index 00000000..5d4454cd
--- /dev/null
+++ b/tests/shell/testcases/optimizations/merge_vmap
@@ -0,0 +1,13 @@
+#!/bin/bash
+
+set -e
+
+RULESET="table ip x {
+	chain y {
+		ip saddr 1.1.1.1 ip daddr 2.2.2.2 accept
+		ip saddr 2.2.2.2 ip daddr 3.3.3.3 drop
+	}
+}"
+
+# check that optimizer output displays vmap in the listing
+$NFT -o -f - <<< $RULESET 2>&1 | grep vmap