From: Florian Westphal <fw@strlen.de>
Date: Fri, 10 Jul 2026 10:42:26 +0000 (+0200)
Subject: extensions: physdev: add regression test for mask size
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=84faa6b539e79156a29f375a4eb14c24ec60be0b;p=thirdparty%2Fiptables.git

extensions: physdev: add regression test for mask size

This rule fails on recent kernels because of bogus mask
check added in kernel commit
8df772afc9d0 ("netfilter: x_physdev: reject empty or not-nul terminated device names").

Signed-off-by: Florian Westphal <fw@strlen.de>
---

diff --git a/extensions/libxt_physdev.t b/extensions/libxt_physdev.t
index 1fab7e19..05ad51ac 100644
--- a/extensions/libxt_physdev.t
+++ b/extensions/libxt_physdev.t
@@ -1,6 +1,7 @@
 :INPUT,FORWARD
 -m physdev --physdev-in lo;=;OK
 -m physdev --physdev-is-in --physdev-in lo;=;OK
+-m physdev --physdev-is-in --physdev-in 1234567890abcde;=;OK
 :OUTPUT,FORWARD
 # xt_physdev: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore.
 # ERROR: should fail: iptables -A FORWARD -m physdev --physdev-out lo