Specifying -S on the command line would add 4096 (0x1000, 1<<12) to the cmd flags, but -S was in fact commands_v_options[13]. This led to a bogus option checking and an error message: $ iptables -A foo -S iptables v1.4.14: Cannot use -E with -A References: http://bugs.debian.org/642173 Signed-off-by: Jan Engelhardt <jengelh@xxxxxxx> --- iptables/ip6tables.c | 12 ++++++------ iptables/iptables.c | 12 ++++++------ 2 files changed, 12 insertions(+), 12 deletions(-) diff --git a/iptables/ip6tables.c b/iptables/ip6tables.c index f93bfb3..b2c8776 100644 --- a/iptables/ip6tables.c +++ b/iptables/ip6tables.c @@ -76,12 +76,12 @@ #define CMD_LIST 0x0020U #define CMD_FLUSH 0x0040U #define CMD_ZERO 0x0080U -#define CMD_NEW_CHAIN 0x0100U -#define CMD_DELETE_CHAIN 0x0200U -#define CMD_SET_POLICY 0x0400U -#define CMD_RENAME_CHAIN 0x0800U -#define CMD_LIST_RULES 0x1000U -#define CMD_ZERO_NUM 0x2000U +#define CMD_ZERO_NUM 0x0100U +#define CMD_NEW_CHAIN 0x0200U +#define CMD_DELETE_CHAIN 0x0400U +#define CMD_SET_POLICY 0x0800U +#define CMD_RENAME_CHAIN 0x1000U +#define CMD_LIST_RULES 0x2000U #define CMD_CHECK 0x4000U #define NUMBER_OF_CMD 16 static const char cmdflags[] = { 'I', 'D', 'D', 'R', 'A', 'L', 'F', 'Z', diff --git a/iptables/iptables.c b/iptables/iptables.c index 5786bfd..8884c6a 100644 --- a/iptables/iptables.c +++ b/iptables/iptables.c @@ -72,12 +72,12 @@ #define CMD_LIST 0x0020U #define CMD_FLUSH 0x0040U #define CMD_ZERO 0x0080U -#define CMD_NEW_CHAIN 0x0100U -#define CMD_DELETE_CHAIN 0x0200U -#define CMD_SET_POLICY 0x0400U -#define CMD_RENAME_CHAIN 0x0800U -#define CMD_LIST_RULES 0x1000U -#define CMD_ZERO_NUM 0x2000U +#define CMD_ZERO_NUM 0x0100U +#define CMD_NEW_CHAIN 0x0200U +#define CMD_DELETE_CHAIN 0x0400U +#define CMD_SET_POLICY 0x0800U +#define CMD_RENAME_CHAIN 0x1000U +#define CMD_LIST_RULES 0x2000U #define CMD_CHECK 0x4000U #define NUMBER_OF_CMD 16 static const char cmdflags[] = { 'I', 'D', 'D', 'R', 'A', 'L', 'F', 'Z', -- 1.7.10.4 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
