| commit | 85512f09680a798ebe92e96ad62eeae863fbc791 | [log] [tgz] |
|---|---|---|
| author | Pablo Neira Ayuso <pablo@netfilter.org> | Tue Jul 30 11:39:59 2013 +0200 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Mon Dec 30 23:50:40 2013 +0100 |
| tree | 8f6280b9ff2a13cde21ae0778e9fed3538466c6e | |
| parent | 96180491d51853a4315ba4eeb29a53505b6515e5 [diff] |
nft: fix match revision lookup for IPv6 IPT_SO_GET_REVISION_MATCH != IP6T_SO_GET_REVISION_MATCH, thus, the revision infrastructure was looking for targets instead matches.
diff --git a/iptables/nft.c b/iptables/nft.c index 68fc153..bbe5e39 100644 --- a/iptables/nft.c +++ b/iptables/nft.c
@@ -2730,7 +2730,8 @@ uint32_t portid, seq, type; int ret = 0; - if (opt == IPT_SO_GET_REVISION_MATCH) + if (opt == IPT_SO_GET_REVISION_MATCH || + opt == IP6T_SO_GET_REVISION_MATCH) type = 0; else type = 1;