xtables: nft-arp: fix endianess in nft_arp_parse_payload
nft_arp_print_firewall already handles endianess appropriately.
This fixes the output of the option that allows you to match
ARP header fields.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
diff --git a/iptables/nft-arp.c b/iptables/nft-arp.c
index 09b939d..6ec8a45 100644
--- a/iptables/nft-arp.c
+++ b/iptables/nft-arp.c
@@ -287,22 +287,22 @@
switch (offset) {
case offsetof(struct arphdr, ar_hrd):
get_cmp_data(iter, &ar_hrd, sizeof(ar_hrd), &inv);
- fw->arp.arhrd = htons(ar_hrd);
- fw->arp.arhrd_mask = htons(0xffff);
+ fw->arp.arhrd = ar_hrd;
+ fw->arp.arhrd_mask = 0xffff;
if (inv)
fw->arp.invflags |= ARPT_INV_ARPHRD;
break;
case offsetof(struct arphdr, ar_pro):
get_cmp_data(iter, &ar_pro, sizeof(ar_pro), &inv);
- fw->arp.arpro = htons(ar_pro);
- fw->arp.arpro_mask = htons(0xffff);
+ fw->arp.arpro = ar_pro;
+ fw->arp.arpro_mask = 0xffff;
if (inv)
fw->arp.invflags |= ARPT_INV_ARPPRO;
break;
case offsetof(struct arphdr, ar_op):
get_cmp_data(iter, &ar_op, sizeof(ar_op), &inv);
- fw->arp.arpop = htons(ar_op);
- fw->arp.arpop_mask = htons(0xffff);
+ fw->arp.arpop = ar_op;
+ fw->arp.arpop_mask = 0xffff;
if (inv)
fw->arp.invflags |= ARPT_INV_ARPOP;
break;
