Re: [iptables PATCH] nft: Fix for broken recover_rule_compat()

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, Feb 27, 2024 at 07:40:57PM +0100, Phil Sutter wrote:
> When IPv4 rule generator was changed to emit payload instead of
> meta expressions for l4proto matches, the code reinserting
> NFTNL_RULE_COMPAT_* attributes into rules being reused for counter
> zeroing was broken by accident.
> 
> Make rule compat recovery aware of the alternative match, basically
> reinstating the effect of commit 7a373f6683afb ("nft: Fix -Z for rules
> with NFTA_RULE_COMPAT") but add a test case this time to make sure
> things stay intact.
> 
> Fixes: 69278f9602b43 ("nft: use payload matching for layer 4 protocol")
> Signed-off-by: Phil Sutter <phil@xxxxxx>

Patch applied.




[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux