summaryrefslogtreecommitdiffstats
path: root/tests/nft-chain-test.c
diff options
context:
space:
mode:
Diffstat (limited to 'tests/nft-chain-test.c')
-rw-r--r--tests/nft-chain-test.c109
1 files changed, 109 insertions, 0 deletions
diff --git a/tests/nft-chain-test.c b/tests/nft-chain-test.c
new file mode 100644
index 0000000..35a65be
--- /dev/null
+++ b/tests/nft-chain-test.c
@@ -0,0 +1,109 @@
+/*
+ * (C) 2013 by Ana Rey Botello <anarey@gmail.com>
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 2 of the License, or
+ * (at your option) any later version.
+ *
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <netinet/in.h>
+#include <linux/netfilter/nf_tables.h>
+#include <libnftnl/chain.h>
+
+static int test_ok = 1;
+
+static void print_err(const char *msg)
+{
+ test_ok = 0;
+ printf("\033[31mERROR:\e[0m %s\n", msg);
+}
+
+static void cmp_nftnl_chain(struct nftnl_chain *a, struct nftnl_chain *b)
+{
+
+ if (strcmp(nftnl_chain_get_str(a, NFTNL_CHAIN_NAME),
+ nftnl_chain_get_str(b, NFTNL_CHAIN_NAME)) != 0)
+ print_err("Chain name mismatches");
+ if (strcmp(nftnl_chain_get_str(a, NFTNL_CHAIN_TABLE),
+ nftnl_chain_get_str(b, NFTNL_CHAIN_TABLE)) != 0)
+ print_err("Chain table mismatches");
+ if (nftnl_chain_get_u32(a, NFTNL_CHAIN_FAMILY) !=
+ nftnl_chain_get_u32(b, NFTNL_CHAIN_FAMILY))
+ print_err("Chain family mismatches");
+ if (nftnl_chain_get_u32(a, NFTNL_CHAIN_POLICY) !=
+ nftnl_chain_get_u32(b, NFTNL_CHAIN_POLICY))
+ print_err("Chain policy mismatches");
+ if (nftnl_chain_get_u32(a, NFTNL_CHAIN_HOOKNUM) !=
+ nftnl_chain_get_u32(b, NFTNL_CHAIN_HOOKNUM))
+ print_err("Chain hooknum mismatches");
+ if (nftnl_chain_get_s32(a, NFTNL_CHAIN_PRIO) !=
+ nftnl_chain_get_s32(b, NFTNL_CHAIN_PRIO))
+ print_err("Chain Prio mismatches");
+ if (nftnl_chain_get_u32(a, NFTNL_CHAIN_USE) !=
+ nftnl_chain_get_u32(b, NFTNL_CHAIN_USE))
+ print_err("Chain use mismatches");
+ if (nftnl_chain_get_u64(a, NFTNL_CHAIN_PACKETS) !=
+ nftnl_chain_get_u64(b, NFTNL_CHAIN_PACKETS))
+ print_err("Chain packets mismatches");
+ if (nftnl_chain_get_u64(a, NFTNL_CHAIN_BYTES) !=
+ nftnl_chain_get_u64(b, NFTNL_CHAIN_BYTES))
+ print_err("Chain bytes mismatches");
+ if (nftnl_chain_get_u64(a, NFTNL_CHAIN_HANDLE) !=
+ nftnl_chain_get_u64(b, NFTNL_CHAIN_HANDLE))
+ print_err("Chain handle mismatches");
+ if (strcmp(nftnl_chain_get_str(a, NFTNL_CHAIN_TYPE),
+ nftnl_chain_get_str(b, NFTNL_CHAIN_TYPE)) != 0)
+ print_err("Chain type mismatches");
+ if (strcmp(nftnl_chain_get_str(a, NFTNL_CHAIN_DEV),
+ nftnl_chain_get_str(b, NFTNL_CHAIN_DEV)) != 0)
+ print_err("Chain device mismatches");
+}
+
+int main(int argc, char *argv[])
+{
+ struct nftnl_chain *a, *b;
+ char buf[4096];
+ struct nlmsghdr *nlh;
+
+ a = nftnl_chain_alloc();
+ b = nftnl_chain_alloc();
+ if (a == NULL || b == NULL)
+ print_err("OOM");
+
+ nftnl_chain_set_str(a, NFTNL_CHAIN_NAME, "test");
+ nftnl_chain_set_u32(a, NFTNL_CHAIN_FAMILY, AF_INET);
+ nftnl_chain_set_str(a, NFTNL_CHAIN_TABLE, "Table");
+ nftnl_chain_set_u32(a, NFTNL_CHAIN_POLICY,0x12345678);
+ nftnl_chain_set_u32(a, NFTNL_CHAIN_HOOKNUM, 0x34567812);
+ nftnl_chain_set_s32(a, NFTNL_CHAIN_PRIO, 0x56781234);
+ nftnl_chain_set_u32(a, NFTNL_CHAIN_USE, 0x78123456);
+ nftnl_chain_set_u64(a, NFTNL_CHAIN_PACKETS, 0x1234567812345678);
+ nftnl_chain_set_u64(a, NFTNL_CHAIN_BYTES, 0x7812345678123456);
+ nftnl_chain_set_u64(a, NFTNL_CHAIN_HANDLE, 0x5678123456781234);
+ nftnl_chain_set_str(a, NFTNL_CHAIN_TYPE, "Prueba");
+ nftnl_chain_set_str(a, NFTNL_CHAIN_DEV, "eth0");
+
+ /* cmd extracted from include/linux/netfilter/nf_tables.h */
+ nlh = nftnl_nlmsg_build_hdr(buf, NFT_MSG_NEWCHAIN, AF_INET, 0, 1234);
+ nftnl_chain_nlmsg_build_payload(nlh, a);
+
+ if (nftnl_chain_nlmsg_parse(nlh, b) < 0)
+ print_err("parsing problems");
+
+ cmp_nftnl_chain(a, b);
+
+ nftnl_chain_free(a);
+ nftnl_chain_free(b);
+
+ if (!test_ok)
+ exit(EXIT_FAILURE);
+
+ printf("%s: \033[32mOK\e[0m\n", argv[0]);
+ return EXIT_SUCCESS;
+
+}