From 84faa6b539e79156a29f375a4eb14c24ec60be0b Mon Sep 17 00:00:00 2001 From: Florian Westphal Date: Fri, 10 Jul 2026 12:42:26 +0200 Subject: [PATCH] extensions: physdev: add regression test for mask size This rule fails on recent kernels because of bogus mask check added in kernel commit 8df772afc9d0 ("netfilter: x_physdev: reject empty or not-nul terminated device names"). Signed-off-by: Florian Westphal --- extensions/libxt_physdev.t | 1 + 1 file changed, 1 insertion(+) diff --git a/extensions/libxt_physdev.t b/extensions/libxt_physdev.t index 1fab7e19..05ad51ac 100644 --- a/extensions/libxt_physdev.t +++ b/extensions/libxt_physdev.t @@ -1,6 +1,7 @@ :INPUT,FORWARD -m physdev --physdev-in lo;=;OK -m physdev --physdev-is-in --physdev-in lo;=;OK +-m physdev --physdev-is-in --physdev-in 1234567890abcde;=;OK :OUTPUT,FORWARD # xt_physdev: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. # ERROR: should fail: iptables -A FORWARD -m physdev --physdev-out lo -- 2.47.3