summaryrefslogtreecommitdiff
path: root/regress/sys
AgeCommit message (Collapse)Author
2017-01-10Cleanup the mount point and vnd devices before and after the test.Alexander Bluhm
Use objdir and curdir correctly. Link ffs regress to the build.
2016-12-13Print better error messages in case an expected packet is missing.Alexander Bluhm
2016-12-12Set promiscuous mode during srp1() to receive the arp reply directedAlexander Bluhm
to the ethernet multicast address. This fixes the test on my hardware setup, it was only passing in qemu before. At least scapy 2.3.3p1 is needed to support the promisc=1 parameter here.
2016-11-30Fix typosVincent Gross
2016-11-28Enable the pmtu and traceroute subtests with af-to. pf has beenAlexander Bluhm
fixed now.
2016-11-28The setuid regression test builds and runs a binary that is setuidAlexander Bluhm
or setgid nobody. Since /usr/obj is 0770, user nobody cannot access other files there anymore. Install all programs into a temporary directory and run them there. Check that /tmp is mounted without nosuid.
2016-11-21Print better error message if test fails.Alexander Bluhm
2016-11-21Test that IPv6 framents with invalid length or more-fragment bitAlexander Bluhm
drop the whole fragment cache.
2016-11-20SRPL_FIRST() and SRPL_FOLLOW().Martin Pieuchot
2016-11-17Put all make targets in a loop and print a little more what eachAlexander Bluhm
IPv6 fragment header test is doing.
2016-11-17Send fragment with Hop-by-Hop extension header after the fragmentAlexander Bluhm
header. I must not be processed.
2016-11-16Test multiple combinations of divert connections. The socket cleanupAlexander Bluhm
of the first connection must remove the pf state so that the second connection can succeed. Disable two raw IP tests that do not work with the current implementation in the kernel.
2016-11-15Mark pf states created by this regress test with a label. RemoveAlexander Bluhm
all such states before basic testing to make sure that these subtests are independent.
2016-11-15Sync rdomain_is_used()Martin Pieuchot
2016-11-15rtable_init() now creates the default routing table.Martin Pieuchot
2016-11-15Fix rdomain_is_used() now that lo(4) is created automagically.Martin Pieuchot
2016-11-15Check for correct flags now that ::1 is set automagically.Martin Pieuchot
2016-11-14Regression test for creating a rdomain default loopback interface.Martin Pieuchot
Even if a lo(4) interface will now be created for every rdomain, we must ensure that condiguring such interface via netstart(8) still work, for example: $ cat /etc/hostname.lo1 rdomain 1 127.0.0.1 inet6 ::1/128 alias 88.76.0.3/32
2016-11-09Remove the path MTU workaround in the af-to tcp test. This subtestAlexander Bluhm
passes without it. For ping with af-to the expected mtu is special. Adapt although pf is still broken here and this subtest is disabled.
2016-11-09Split the pf forwarding test into more subtests to make debuggingAlexander Bluhm
specific failures easier.
2016-11-09Use netstat -n in target check-setup to avoid DNS timeout.Alexander Bluhm
Requested by mpi@
2016-11-09Use variable REMOTE_SSH to check the setup of the remote machine.Alexander Bluhm
This was a copy & paste bug from another test. Found by mpi@.
2016-11-05Add regress tests for multicasts and dynamic vxlansVincent Gross
2016-10-26In addition to forwarding and path MTU discovery with pf, checkAlexander Bluhm
that ICMP Time Exceeded packets are generated. Traceroute output from packets forwarded through pf and a router must contain 3 hops and every hop must respond. Do not test with af-to and reply-to rules as this does not work right now.
2016-10-26Cleanup pflow test before fixing it. Be more verbose to makeAlexander Bluhm
debugging easier. Handle EINPROGRESS connect(2) error correctly. Perl pack Q fails on 32 bit machines, add workaround. Restore interfaces in END block, works also if script dies. OK florian@
2016-10-24Add regress tests for carp(4).YASUOKA Masahiko
2016-10-20During sniffing filter strictly on icmp6 "packet too big" to avoidAlexander Bluhm
that "neighbor discovery" confuses the test.
2016-10-20By removing all the sleeps I created a race in the pf tests. TheAlexander Bluhm
packet was sent and its reply received before the sniffer was up and running. So sleep a second after starting the sniffer thread but before sending the packet. With pf_forward 0m51.54s, pf_fragment 1m33.59s, pf_state 0m03.64s the test are still faster than with forking.
2016-10-20Replace fork() and sleep() with a Python thread for sniffing packets.Alexander Bluhm
This reduces test execution time from 2m21.95s to 1m09.80s.
2016-10-20Replace fork() and sleep() with a Python thread for sniffing packets.Alexander Bluhm
This reduces test execution time from 1m20.34s to 0m37.32s.
2016-10-20Make the test faster. Move all the packet matching code into theAlexander Bluhm
pcap filter. That means the first packet sniffed is the correct one. In the success case, we can stop without waiting for a timeout. OK sashan@
2016-10-19Add a test suite for pf state handling. It needs a remote machineAlexander Bluhm
to exchange packets, the remote kernel is tested. For now it only contains a challenge ack test written by sashan@. OK sashan@
2016-10-19Link pf_state test to build.Alexander Bluhm
2016-10-19Add a test suite for pf state handling. It needs a remote machineAlexander Bluhm
to exchange packets, the remote kernel is tested. For now it only contains a challenge ack test written by sashan@. OK sashan@
2016-10-19The clean:, cleandir:, and obj: targets of src/Makefile descend intoTheo Buehler
regress/ and run python to set the IMPORT_PYTHON variable in several test Makefiles. This results in W^X violations during 'make build'. Avoid doing that. ok bluhm
2016-10-19Do not change routes during test run, but expect that everythingAlexander Bluhm
is setup correctly before. Use make check-setup to verify that.
2016-10-10Move check for sysctl settings from shell script to makefile toAlexander Bluhm
handle skipping consistently like other tests.
2016-10-07Add simple regress test for vxlan(4) and etherip(4).YASUOKA Masahiko
ok bluhm
2016-10-05Link the setuid regress test to the build in a way that the objAlexander Bluhm
directory gets created. But do not run the test during a global make regress, as the test puts a setuid binary into the object directory. Also remove the setuid bit after the test has been run manually. OK otto@
2016-10-03The setuid tests needs an obj directory that allows to run programsAlexander Bluhm
with set user id. Skip the test if the current filesystem has set the nosuid mount option. OK otto@
2016-09-30crypto(4) is no moreOtto Moerbeek
2016-09-28If stdout is not line buffered, messages got lost when assert() wasAlexander Bluhm
called. Print errors to stderr instead.
2016-09-24On sparc64 we need "retl" not "ret" to do an immediate return.Mark Kettenis
ok deraadt@, tedu@
2016-09-24recpect W^X, sparc64 still has a problem: non-exec mmap: executeOtto Moerbeek
#1 is done, the others not. ok kettenis@ millert@
2016-09-23Making the regress target depends on building PROG.Alexander Bluhm
2016-09-23Zap mquery test for goodOtto Moerbeek
2016-09-23Zap. Has been disabled for a long time and makes unholy assumptions aboutOtto Moerbeek
the address pace layout. ok bluhhm@
2016-09-21Use /dev/console as a template for the pseudo tty, stdin may be notAlexander Bluhm
a terminal. Check wether tcgetattr() can read the values. Do not only verify that kqueue does not report unwanted events but also that expected events exist.
2016-09-21Enter rtableMartin Pieuchot
2016-09-21Test ART implementation by default.Martin Pieuchot
RADIX code can be tested by doing "make RADIX=1"