diff options
| author |   Jason A. Donenfeld <Jason@zx2c4.com> | 2020-10-29 03:56:05 +0100 |
|---|---|---|
| committer |   Pablo Neira Ayuso <pablo@netfilter.org> | 2020-10-30 12:57:38 +0100 |
| commit | af8afcf1fdd5f365f70e2386c2d8c7a1abd853d7 (patch) | |
| tree | b6b087a7f6e10292c2925314e14ecb3d1148a221 /tools/testing/selftests/wireguard/qemu | |
| parent | netfilter: nftables: fix netlink report logic in flowtable and genid (diff) | |
| download | wireguard-linux-af8afcf1fdd5f365f70e2386c2d8c7a1abd853d7.tar.xz wireguard-linux-af8afcf1fdd5f365f70e2386c2d8c7a1abd853d7.zip | |
wireguard: selftests: check that route_me_harder packets use the right sk
If netfilter changes the packet mark, the packet is rerouted. The
ip_route_me_harder family of functions fails to use the right sk, opting
to instead use skb->sk, resulting in a routing loop when used with
tunnels. With the next change fixing this issue in netfilter, test for
the relevant condition inside our test suite, since wireguard was where
the bug was discovered.
Reported-by: Chen Minqiang <ptpt52@gmail.com>
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tools/testing/selftests/wireguard/qemu')
| -rw-r--r-- | tools/testing/selftests/wireguard/qemu/kernel.config | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/tools/testing/selftests/wireguard/qemu/kernel.config b/tools/testing/selftests/wireguard/qemu/kernel.config index d531de13c95b..4eecb432a66c 100644 --- a/tools/testing/selftests/wireguard/qemu/kernel.config +++ b/tools/testing/selftests/wireguard/qemu/kernel.config @@ -18,10 +18,12 @@ CONFIG_NF_NAT=y CONFIG_NETFILTER_XTABLES=y CONFIG_NETFILTER_XT_NAT=y CONFIG_NETFILTER_XT_MATCH_LENGTH=y +CONFIG_NETFILTER_XT_MARK=y CONFIG_NF_CONNTRACK_IPV4=y CONFIG_NF_NAT_IPV4=y CONFIG_IP_NF_IPTABLES=y CONFIG_IP_NF_FILTER=y +CONFIG_IP_NF_MANGLE=y CONFIG_IP_NF_NAT=y CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IP_MULTIPLE_TABLES=y |