espressif/openthread
1
0
Fork 0
mirror of https://github.com/espressif/openthread.git synced 2026-10-08 08:47:38 +00:00
Code Issues Packages Projects Releases Wiki Activity

[thci] fix mdns_query incorrect ip6tables rules (#8159)

Browse Source 
This commit fixes the bug that `mdns_query` inserts `ip6tables` rules
in an incorrect order.  It also uses `ip6tables -F INPUT` to flush the
`INPUT` chain after mDNS query is done.
This commit is contained in:
Simon Lin
2022-09-15 08:52:41 -07:00
committed by GitHub
parent 6973a1b067
commit b11121b7b5
1 changed files with 6 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tools/harness-thci/OpenThread_BR.py
+6 -12
View File
@@ -649,28 +649,22 @@ class OpenThread_BR(OpenThreadTHCI, IThci):
@API
def mdns_query(self, service='_meshcop._udp.local', addrs_allowlist=(), addrs_denylist=()):
cleanup = []
def ip6tables_cmd(cmd):
assert '-I INPUT' in cmd
self.bash(cmd)
cleanup.append(cmd.replace('-I INPUT', '-D INPUT'))
try:
for deny_addr in addrs_denylist:
ip6tables_cmd('ip6tables -I INPUT -p udp --dport 5353 -s %s -j DROP' % deny_addr)
self.bash('ip6tables -A INPUT -p udp --dport 5353 -s %s -j DROP' % deny_addr)
if addrs_allowlist:
for allow_addr in addrs_allowlist:
ip6tables_cmd('ip6tables -I INPUT -p udp --dport 5353 -s %s -j ACCEPT' % allow_addr)
self.bash('ip6tables -A INPUT -p udp --dport 5353 -s %s -j ACCEPT' % allow_addr)
ip6tables_cmd('ip6tables -I INPUT -p udp --dport 5353 -j DROP')
self.bash('ip6tables -A INPUT -p udp --dport 5353 -j DROP')
return self._mdns_query_impl(service, find_active=(addrs_allowlist or addrs_denylist))
finally:
for cmd in cleanup:
self.bash(cmd)
self.bash('ip6tables -L INPUT -v')
self.bash('ip6tables -F INPUT')
time.sleep(1)
def _mdns_query_impl(self, service, find_active):
# For BBR-TC-03 or DH test cases (empty arguments) just send a query