Logic in the test was inverted. The result was the jump string
not to be set.
Reported-by: Alex Chapman <ajchapman88@xxxxxxxxxxxxx>
Signed-off-by: Eric Leblond <eric@xxxxxxxxx>
---
src/netlink_linearize.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/src/netlink_linearize.c b/src/netlink_linearize.c
index da8be20..e64e92a 100644
--- a/src/netlink_linearize.c
+++ b/src/netlink_linearize.c
@@ -440,7 +440,8 @@ static void netlink_gen_immediate(struct netlink_linearize_ctx *ctx,
nft_rule_expr_set(nle, NFT_EXPR_IMM_DATA, nld.value, nld.len);
break;
case EXPR_VERDICT:
- if (nft_rule_expr_is_set(nle, NFT_EXPR_IMM_CHAIN)) {
+ if ((expr->chain != NULL) &&
+ !nft_rule_expr_is_set(nle, NFT_EXPR_IMM_CHAIN)) {
nft_rule_expr_set_str(nle, NFT_EXPR_IMM_CHAIN,
nld.chain);
}
--
1.8.4.3
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
