git: 48a202f5b219 - stable/13 - netpfil tests: skip checksum verification in pft_ping.py

From: Kristof Provost <kp_at_FreeBSD.org>
Date: Mon, 21 Oct 2024 12:52:46 UTC
The branch stable/13 has been updated by kp:

URL: https://cgit.FreeBSD.org/src/commit/?id=48a202f5b2190f89c4a755c36155a054b721a19e

commit 48a202f5b2190f89c4a755c36155a054b721a19e
Author:     Kristof Provost <kp@FreeBSD.org>
AuthorDate: 2024-10-14 12:57:49 +0000
Commit:     Kristof Provost <kp@FreeBSD.org>
CommitDate: 2024-10-21 07:34:13 +0000

    netpfil tests: skip checksum verification in pft_ping.py
    
    From scapy 2.6.0 it now removes (sets to None) the IP checksum in its defrag
    code. We typically ask for IPv4 or IPv6 defragmentation, which causes check
    function failures.
    
    Just skip the checksum verificiation here, because we're going to notice
    incorrect checksums even if the tests don't directly verify it.
    
    MFC after:      1 week
    Sponsored by:   Rubicon Communications, LLC ("Netgate")
    
    (cherry picked from commit 6b8096fa5f6f81e2959cbb2ca857c4e134273da2)
---
 tests/sys/netpfil/common/pft_ping.py | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/tests/sys/netpfil/common/pft_ping.py b/tests/sys/netpfil/common/pft_ping.py
index 380b92a662c7..9f5aae08888e 100644
--- a/tests/sys/netpfil/common/pft_ping.py
+++ b/tests/sys/netpfil/common/pft_ping.py
@@ -137,12 +137,6 @@ def check_ipv4(expect_params, packet):
     if dst_address and ip.dst != dst_address:
         LOGGER.debug('Destination IPv4 address does not match!')
         return False
-    chksum = ip.chksum
-    ip.chksum = None
-    new_chksum = sp.IP(sp.raw(ip)).chksum
-    if chksum != new_chksum:
-        LOGGER.debug(f'Expected IP checksum {new_chksum} but found {chksum}')
-        return False
     if flags and ip.flags != flags:
         LOGGER.debug(f'Wrong IP flags value {ip.flags}, expected {flags}')
         return False