|
 |
725d6a |
From 4b2fecb2288fdd345f98890f9c801b1e4e2a5474 Mon Sep 17 00:00:00 2001
|
|
|
725d6a |
From: Phil Sutter <psutter@redhat.com>
|
|
|
725d6a |
Date: Thu, 25 Jun 2020 16:42:36 +0200
|
|
|
725d6a |
Subject: [PATCH 34/45] fix: core: rich: Catch ValueError on non-numeric
|
|
|
725d6a |
priority values
|
|
|
725d6a |
|
|
|
725d6a |
Be a bit more user-friendly by printing:
|
|
|
725d6a |
|
|
|
725d6a |
| Error: INVALID_RULE: invalid 'priority' attribute value 'ab'.
|
|
|
725d6a |
|
|
|
725d6a |
instead of Python's default, which is:
|
|
|
725d6a |
|
|
|
725d6a |
| Error: invalid literal for int() with base 10: 'ab'
|
|
|
725d6a |
|
|
|
725d6a |
Fixes: rhbz 1689429
|
|
|
725d6a |
(cherry picked from commit 3a0e79b1cfe4344d21d30eb47c038252d728cc44)
|
|
|
725d6a |
(cherry picked from commit fa21382cc513cc0dba56ba085782a3e23c863afc)
|
|
|
725d6a |
---
|
|
|
725d6a |
src/firewall/core/rich.py | 5 ++++-
|
|
|
725d6a |
src/tests/regression/regression.at | 1 +
|
|
|
725d6a |
src/tests/regression/rhbz1689429.at | 12 ++++++++++++
|
|
|
725d6a |
3 files changed, 17 insertions(+), 1 deletion(-)
|
|
|
725d6a |
create mode 100644 src/tests/regression/rhbz1689429.at
|
|
|
725d6a |
|
|
|
725d6a |
diff --git a/src/firewall/core/rich.py b/src/firewall/core/rich.py
|
|
|
725d6a |
index dacaeb9c0b70..eb4a2d2d9669 100644
|
|
|
725d6a |
--- a/src/firewall/core/rich.py
|
|
|
725d6a |
+++ b/src/firewall/core/rich.py
|
|
|
725d6a |
@@ -379,7 +379,10 @@ class Rich_Rule(object):
|
|
|
725d6a |
raise FirewallError(errors.INVALID_RULE, "'family' attribute cannot have '%s' value. Use 'ipv4' or 'ipv6' instead." % attr_value)
|
|
|
725d6a |
self.family = attr_value
|
|
|
725d6a |
elif attr_name == 'priority':
|
|
|
725d6a |
- self.priority = int(attr_value)
|
|
|
725d6a |
+ try:
|
|
|
725d6a |
+ self.priority = int(attr_value)
|
|
|
725d6a |
+ except ValueError:
|
|
|
725d6a |
+ raise FirewallError(errors.INVALID_RULE, "invalid 'priority' attribute value '%s'." % attr_value)
|
|
|
725d6a |
elif attr_name:
|
|
|
725d6a |
if attr_name == 'protocol':
|
|
|
725d6a |
err_msg = "wrong 'protocol' usage. Use either 'rule protocol value=...' or 'rule [forward-]port protocol=...'."
|
|
|
725d6a |
diff --git a/src/tests/regression/regression.at b/src/tests/regression/regression.at
|
|
|
725d6a |
index 984d299bfd4e..1c8f76afa87a 100644
|
|
|
725d6a |
--- a/src/tests/regression/regression.at
|
|
|
725d6a |
+++ b/src/tests/regression/regression.at
|
|
|
725d6a |
@@ -30,3 +30,4 @@ m4_include([regression/gh330.at])
|
|
|
725d6a |
m4_include([regression/gh599.at])
|
|
|
725d6a |
m4_include([regression/rhbz1829104.at])
|
|
|
725d6a |
m4_include([regression/rhbz1843398.at])
|
|
|
725d6a |
+m4_include([regression/rhbz1689429.at])
|
|
|
725d6a |
diff --git a/src/tests/regression/rhbz1689429.at b/src/tests/regression/rhbz1689429.at
|
|
|
725d6a |
new file mode 100644
|
|
|
725d6a |
index 000000000000..5701607d660f
|
|
|
725d6a |
--- /dev/null
|
|
|
725d6a |
+++ b/src/tests/regression/rhbz1689429.at
|
|
|
725d6a |
@@ -0,0 +1,12 @@
|
|
|
725d6a |
+FWD_START_TEST([rich rule invalid priority])
|
|
|
725d6a |
+AT_KEYWORDS(rich rhbz1689429)
|
|
|
725d6a |
+
|
|
|
725d6a |
+FWD_CHECK([--add-rich-rule='rule priority=foo accept'], 122, [],
|
|
|
725d6a |
+ [Error: INVALID_RULE: invalid 'priority' attribute value 'foo'.
|
|
|
725d6a |
+])
|
|
|
725d6a |
+FWD_CHECK([--permanent --add-rich-rule='rule priority=foo accept'], 122, [],
|
|
|
725d6a |
+ [Error: INVALID_RULE: invalid 'priority' attribute value 'foo'.
|
|
|
725d6a |
+])
|
|
|
725d6a |
+FWD_RELOAD
|
|
|
725d6a |
+
|
|
|
725d6a |
+FWD_END_TEST([ignore])
|
|
|
725d6a |
--
|
|
|
725d6a |
2.27.0
|
|
|
725d6a |
|