[NETFILTER]: xt_conntrack: fix missing boolean clamping Signed-off-by: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx> Signed-off-by: Patrick McHardy <kaber@xxxxxxxxx> --- commit bcc67d744bd9df15cb4e2d590b30ddadebd5a867 tree 8888741a4eb78658db89b968d066837478238597 parent 2ffa8857857148a5b0c0823852d6cb2551a3ae5a author Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx> Wed, 27 Feb 2008 13:23:56 +0100 committer Patrick McHardy <kaber@xxxxxxxxx> Wed, 27 Feb 2008 13:23:56 +0100 net/netfilter/xt_conntrack.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/net/netfilter/xt_conntrack.c b/net/netfilter/xt_conntrack.c index 8533085..dd192ac 100644 --- a/net/netfilter/xt_conntrack.c +++ b/net/netfilter/xt_conntrack.c @@ -231,7 +231,7 @@ conntrack_mt(const struct sk_buff *skb, const struct net_device *in, if (test_bit(IPS_DST_NAT_BIT, &ct->status)) statebit |= XT_CONNTRACK_STATE_DNAT; } - if ((info->state_mask & statebit) ^ + if (!!(info->state_mask & statebit) ^ !(info->invert_flags & XT_CONNTRACK_STATE)) return false; } - To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
