| 066b822f78666758ff82c43321ade07fd0d54eb3 |
|
10-Aug-2017 |
Lorenzo Colitti <lorenzo@google.com> |
Delete all remaining callers of iptables.
Also move to binder_test.cpp some string constants that are used
only there.
(cherry picked from commit 5c68b9c1e4b7d8cf05b6ce9f6d1458ffda225eac)
Bug: 28362720
Test: bullhead builds,boots
Test: netd_{unit,integration}_test pass
Change-Id: Icebaac93fc3a661902deced985119d2d1735732e
Merged-In: I3f72946de374a7deaeef88b1dd5589d9a20ccce7
/system/netd/server/IptablesBaseTest.cpp
|
| be79d6547d93c0be373db811d3f0265a93a76f3f |
|
10-Aug-2017 |
Lorenzo Colitti <lorenzo@google.com> |
Convert NatController to iptables-restore.
This conversion is a bit more involved than previous ones, mostly
due to all the error unwinding.
For the sake of readability, this change limits itself to
converting mostly maintaining their order, with the exception
that it puts the rpfilter rule before all the LOCAL_FORWARD rules
to simplify error handling.
It also groups commands together as much as possible to simplify
error handling: because a set of iptables commands between
"*<table>" and "COMMIT" will either all succeed or all fail,
grouping commands together limits the number of required
error handling paths.
(cherry picked from commit eb7eb3ecea2e06e84fa9528b68d0a618b16b1ad9)
Bug: 28362720
Test: bullhead builds,boots
Test: netd_{unit,integration}_test pass
Change-Id: I73b511e242773e559afef00fa29154267070691d
Merged-In: I3f72946de374a7deaeef88b1dd5589d9a20ccce7
/system/netd/server/IptablesBaseTest.cpp
|
| d30e84b3bf78ab6caab74f4ff17967406bfa8165 |
|
19-Jun-2017 |
Treehugger Robot <treehugger-gerrit@google.com> |
Merge "Va_end should be used with va_start"
|
| c1306ea230c95ef0268d4d20a213911799982671 |
|
26-Mar-2017 |
Lorenzo Colitti <lorenzo@google.com> |
Use iptables-restore to set the incoming packet mark rule.
This speeds up network switching because one rule needs to be
added/removed per interface.
Bug: 28362720
Test: bullhead builds, boots
Test: netd_{unit,integration}_test pass
Test: watch -n1 "adb shell iptables -v -n -t mangle -L INPUT" while switching networks
Change-Id: Ie536db6a50d018c88bb03c5f069965e99e0d162e
/system/netd/server/IptablesBaseTest.cpp
|
| f7f2dc08b262e978f5df9442b86f9c1bf53ea276 |
|
23-Mar-2017 |
Mikhail Lappo <miklelappo@gmail.com> |
Va_end should be used with va_start
va_start is used and va_end should
be invoked accordingly
Change-Id: Ib894c5d20fa07d2e89859f04b4ac0d52d4aca51c
/system/netd/server/IptablesBaseTest.cpp
|
| 849a11c9bb999115e59e03efd61d108305d2fd55 |
|
27-Feb-2017 |
Lorenzo Colitti <lorenzo@google.com> |
Support pretending that certain iptables commands failed.
Bug: 28362720
Test: see subsequent CL.
Change-Id: Id4db5f481bd94ae04d2a5cf7c5c97be1f000c3c9
/system/netd/server/IptablesBaseTest.cpp
|
| cd28377ac7736aa18700ffdc075e3b16c1d1f656 |
|
31-Jan-2017 |
Lorenzo Colitti <lorenzo@google.com> |
Support reading output from IptablesRestoreController.
Add the ability to IptablesRestoreController to return the output
of a command. This is useful to run commands that list chains or
return counters through the ip[6]tables-restore.
Also enable unsigned-integer-overflow sanitization the unit tests
because their behaviour should be representative of actual code.
Having address sanitization enabled would have saved a fair
amount of time debugging an on-device abort() that did not affect
the tests.
Test: new unit test passes
Bug: 32323979
Change-Id: I70726ebbade0cb792aba38787c57378df177f2d8
/system/netd/server/IptablesBaseTest.cpp
|
| 8e1cee9064af5b2e0d8095d5a6a05953616d7d4c |
|
09-Jul-2016 |
Lorenzo Colitti <lorenzo@google.com> |
Add a test for NatController.
Bug: 9580643
Change-Id: I6ac3b754ec0b720674c6221e3a776314e86fe58c
/system/netd/server/IptablesBaseTest.cpp
|
| bbeaf9a4d272eefb11748d7d40c6bd117ab468fb |
|
08-Jul-2016 |
Lorenzo Colitti <lorenzo@google.com> |
Add a test for getTetherStats.
Bug: 9580643
Change-Id: I26f7adb9639f1ddf4eda0c98bcc6cd3a83d3ba0b
/system/netd/server/IptablesBaseTest.cpp
|
| 54ecf16d8effb5feedb7138254c880bd9f7a26b3 |
|
13-May-2016 |
Lorenzo Colitti <lorenzo@google.com> |
Don't crash the test if expecting more commands than were run.
Bug: 26675191
Change-Id: I54860c7cf7b79bb6ace89c3130467ba7c0473e03
/system/netd/server/IptablesBaseTest.cpp
|
| e60c0a51957596788995ec57d33531cd103d8dd7 |
|
28-Mar-2016 |
Lorenzo Colitti <lorenzo@google.com> |
Use iptables-restore in StrictController startup.
Bug: 21725996
Change-Id: I2c049a934189f3c87ee15f052abc07d35814f0c9
/system/netd/server/IptablesBaseTest.cpp
|
| 9028d91fd86a2d517c7ce163c1d88b41de961ba8 |
|
27-Mar-2016 |
Lorenzo Colitti <lorenzo@google.com> |
Add a test for StrictController.
Bug: 21725996
Bug: 25691379
Change-Id: I24b838161eaf98dede2ae897157ba42414fc926f
/system/netd/server/IptablesBaseTest.cpp
|
| 0f15055ba127da5c8bff3617f04ac6df0b4ee2f4 |
|
27-Mar-2016 |
Lorenzo Colitti <lorenzo@google.com> |
Move iptables test code to a new IptablesBaseTest class.
Bug: 25691379
Bug: 21725996
Change-Id: Ia0598e60ad24714d53470e05849929831ba9dbf6
/system/netd/server/IptablesBaseTest.cpp
|