Commit a8c198d1 authored by Aleksei Oladko's avatar Aleksei Oladko Committed by Paolo Abeni
Browse files

selftests: forwarding: fix pedit tests failure with br_netfilter enabled 



The tests use the tc pedit action to modify the IPv4 source address
("pedit ex munge ip src set"), but the IP header checksum is not
recalculated after the modification. As a result, the modified packet
fails sanity checks in br_netfilter after bridging and is dropped,
which causes the test to fail.

Fix this by ensuring net.bridge.bridge-nf-call-iptables is set to 0
during the test execution. This prevents the bridge from passing
L2 traffic to netfilter, bypassing the checksum validation that
causes the test failure.

Fixes: 92ad3828 ("selftests: forwarding: Add a test for pedit munge SIP and DIP")
Fixes: 226657ba ("selftests: forwarding: Add a forwarding test for pedit munge dsfield")
Signed-off-by: default avatarAleksei Oladko <aleksey.oladko@virtuozzo.com>
Reviewed-by: default avatarIdo Schimmel <idosch@nvidia.com>
Link: https://patch.msgid.link/20260213131907.43351-4-aleksey.oladko@virtuozzo.com


Signed-off-by: default avatarPaolo Abeni <pabeni@redhat.com>
parent ce9f6aec

tools/testing/selftests/net/forwarding/pedit_dsfield.sh

+8 −0
Original line number Diff line number Diff line
@@ -98,12 +98,20 @@ setup_prepare() 
	h1_create

	h2_create

	switch_create



	if [ -f /proc/sys/net/bridge/bridge-nf-call-iptables ]; then

		sysctl_set net.bridge.bridge-nf-call-iptables 0

	fi

}



cleanup()

{

	pre_cleanup



	if [ -f /proc/sys/net/bridge/bridge-nf-call-iptables ]; then

		sysctl_restore net.bridge.bridge-nf-call-iptables

	fi



	switch_destroy

	h2_destroy

	h1_destroy

tools/testing/selftests/net/forwarding/pedit_ip.sh

+8 −0
Original line number Diff line number Diff line
@@ -91,12 +91,20 @@ setup_prepare() 
	h1_create

	h2_create

	switch_create



	if [ -f /proc/sys/net/bridge/bridge-nf-call-iptables ]; then

		sysctl_set net.bridge.bridge-nf-call-iptables 0

	fi

}



cleanup()

{

	pre_cleanup



	if [ -f /proc/sys/net/bridge/bridge-nf-call-iptables ]; then

		sysctl_restore net.bridge.bridge-nf-call-iptables

	fi



	switch_destroy

	h2_destroy

	h1_destroy