File: 0010endless_jump_loop_1

package info (click to toggle)
nftables 1.1.6-1
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid
  • size: 15,384 kB
  • sloc: ansic: 50,901; sh: 20,277; yacc: 5,861; python: 1,746; lex: 1,367; makefile: 392
file content (11 lines) | stat: -rwxr-xr-x 254 bytes parent folder | download | duplicates (2) 
1
2
3
4
5
6
7
8
9
10
11
 
#!/bin/bash

set -e

$NFT add table t
$NFT add chain "t c { type filter hook input priority 0; }"

# kernel should return ELOOP
$NFT add rule t c tcp dport vmap {1 : jump c} 2>/dev/null || exit 0
echo "E: accepted endless jump loop in a vmap" >&2
exit 1