tree 0ea7a510623f5debe46772178f545b75eae21bbc
parent 5f6e384ac2a3d7b647a909654a3bdee1c0bcb3eb
author Pablo Neira Ayuso <pablo@netfilter.org> 1381227237 +0200
committer Pablo Neira Ayuso <pablo@netfilter.org> 1388443852 +0100

nft: fix bad length when comparing extension data area

Use ->userspacesize to compare the extension data area, otherwise
we also compare the internal private pointers which are only
meaningful to the kernelspace.

This fixes:

xtables -4 -D INPUT -m connlimit \
	--connlimit-above 10 --connlimit-mask 32 --connlimit-daddr

But it also fixes many other matches/targets which use internal
private data.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>