From: Florian Westphal <fw@strlen.de>
Date: Thu, 17 Aug 2023 18:37:21 +0000 (+0200)
Subject: tests: update bad_expression test case
X-Git-Tag: v1.0.9~202
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=f3411cbf4608df4c83bb7d830ea118d923affb2e;p=thirdparty%2Fnftables.git

tests: update bad_expression test case

Check that the ruleset also fails to validate if there is
another table that passes validation checks.

Reported-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Florian Westphal <fw@strlen.de>
---

diff --git a/tests/shell/testcases/transactions/bad_expression b/tests/shell/testcases/transactions/bad_expression
index df46ceb0..a820c2b9 100755
--- a/tests/shell/testcases/transactions/bad_expression
+++ b/tests/shell/testcases/transactions/bad_expression
@@ -4,6 +4,14 @@
 # nft must return an error.  Also catch nfnetlink retry loops that
 # cause nft or kernel to spin.
 timeout 3 $NFT -f - <<EOF
+table ip t0 {
+	chain c { }
+	chain input {
+		type filter hook input priority 0;
+		jump c
+	}
+}
+
 table ip t1 {
 	chain a {
 		masquerade
@@ -17,6 +25,7 @@ EOF
 
 rc=$?
 if [ $rc -eq 0 ]; then
+	echo "Ruleset should have failed" 1>&2
 	exit 111
 fi