From: Florian Westphal <fw@strlen.de>
Date: Wed, 10 Jul 2024 21:02:08 +0000 (+0200)
Subject: tests: shell: test jump to basechain is rejected, even if there is no loop
X-Git-Tag: v1.1.0~3
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=eddd1c779c712e2103dfb5d201faf1c956d3734a;p=thirdparty%2Fnftables.git

tests: shell: test jump to basechain is rejected, even if there is no loop

Check that we can't jump to input hook from output.

Signed-off-by: Florian Westphal <fw@strlen.de>
---

diff --git a/tests/shell/testcases/chains/jump_to_base_chain b/tests/shell/testcases/chains/jump_to_base_chain
new file mode 100755
index 00000000..d71da4cf
--- /dev/null
+++ b/tests/shell/testcases/chains/jump_to_base_chain
@@ -0,0 +1,25 @@
+#!/bin/bash
+
+$NFT -f - <<EOF
+table t {
+	chain i {
+		type filter hook input priority 0
+	}
+
+	chain o {
+		type filter hook output priority 0
+		jump c
+	}
+
+	chain c {
+		jump i
+	}
+}
+EOF
+
+if [ $? -eq 0 ];then
+	echo "E: Accepted jump to a base chain"
+	exit 1
+fi
+
+exit 0