selftests: netfilter: add test for br_netfilter+conntrack+queue combination
authorFlorian Westphal <fw@strlen.de>
Thu, 8 Aug 2024 21:14:43 +0000 (23:14 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 14 Aug 2024 21:37:27 +0000 (23:37 +0200)
commitea2306f0330c59ac8cd6ba13193497f0a6a02684
tree1bb01df3fd5c67228bb6dc88a1d31ae42da48ae8
parent7d8dc1c7be8d3509e8f5164dd5df64c8e34d7eeb
selftests: netfilter: add test for br_netfilter+conntrack+queue combination

Trigger cloned skbs leaving softirq protection.
This triggers splat without the preceeding change
("netfilter: nf_queue: drop packets with cloned unconfirmed
 conntracks"):

WARNING: at net/netfilter/nf_conntrack_core.c:1198 __nf_conntrack_confirm..

because local delivery and forwarding will race for confirmation.

Based on a reproducer script from Yi Chen.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
tools/testing/selftests/net/netfilter/Makefile
tools/testing/selftests/net/netfilter/br_netfilter_queue.sh [new file with mode: 0755]