nftables/set_test.go

72 lines
1.6 KiB
Go

package nftables
import (
"reflect"
"testing"
)
func genSetKeyType(types ...uint32) uint32 {
c := types[0]
for i := 1; i < len(types); i++ {
c = c<<SetConcatTypeBits | types[i]
}
return c
}
func TestValidateNFTMagic(t *testing.T) {
t.Parallel()
tests := []struct {
name string
nftMagicPacked uint32
pass bool
invalid []uint32
}{
{
name: "Single valid nftMagic",
nftMagicPacked: genSetKeyType(7),
pass: true,
invalid: nil,
},
{
name: "Single invalid nftMagic",
nftMagicPacked: genSetKeyType(25),
pass: false,
invalid: []uint32{25},
},
{
name: "Multiple valid nftMagic",
nftMagicPacked: genSetKeyType(7, 13),
pass: true,
invalid: nil,
},
{
name: "Multiple nftMagic with 1 invalid",
nftMagicPacked: genSetKeyType(7, 13, 25),
pass: false,
invalid: []uint32{25},
},
{
name: "Multiple nftMagic with 2 invalid",
nftMagicPacked: genSetKeyType(7, 13, 25, 26),
pass: false,
invalid: []uint32{26, 25},
// Invalid entries will appear in reverse order
},
}
for _, tt := range tests {
t.Run(tt.name, func(t *testing.T) {
invalid, pass := validateKeyType(tt.nftMagicPacked)
if pass && !tt.pass {
t.Fatalf("expected to fail but succeeded")
}
if !pass && tt.pass {
t.Fatalf("expected to succeed but failed with invalid nftMagic: %+v", invalid)
}
if !reflect.DeepEqual(tt.invalid, invalid) {
t.Fatalf("Expected invalid: %+v but got: %+v", tt.invalid, invalid)
}
})
}
}