redonkable
/
alistair23-linux
1
0
Fork 0
Code Releases Activity

[NETFILTER]: xt_conntrack: fix missing boolean clamping 

Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
hifive-unleashed-5.1
Jan Engelhardt 2008-02-27 12:09:05 -08:00 committed by David S. Miller
parent 4e29e9ec7e
commit d61f89e941
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
net/netfilter/xt_conntrack.c
View File

@ -231,7 +231,7 @@ conntrack_mt(const struct sk_buff *skb, const struct net_device *in,
if (test_bit(IPS_DST_NAT_BIT, &ct->status))
statebit |= XT_CONNTRACK_STATE_DNAT;
}
if ((info->state_mask & statebit) ^
if (!!(info->state_mask & statebit) ^
!(info->invert_flags & XT_CONNTRACK_STATE))
return false;
}