From 3dafef40228c372976eb714836ea097115d8fd03 Mon Sep 17 00:00:00 2001 From: Jan Engelhardt Date: Sat, 20 Aug 2011 18:26:48 +0200 Subject: libxt_tcp: always print the mask parts 0xFF is unlikely to happen (given that ALL translates to 0x3F at most), but assuming that through magic, 0xFF was put into memory, iptables -S/iptables-save would ignore printing it, practically outputting just one argument to --tcp-flags which currently wants two. Signed-off-by: Jan Engelhardt --- extensions/libxt_tcp.c | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) (limited to 'extensions') diff --git a/extensions/libxt_tcp.c b/extensions/libxt_tcp.c index 3940d91e..e849fa21 100644 --- a/extensions/libxt_tcp.c +++ b/extensions/libxt_tcp.c @@ -357,9 +357,7 @@ static void tcp_save(const void *ip, const struct xt_entry_match *match) if (tcpinfo->invflags & XT_TCP_INV_FLAGS) printf(" !"); printf(" --tcp-flags "); - if (tcpinfo->flg_mask != 0xFF) { - print_tcpf(tcpinfo->flg_mask); - } + print_tcpf(tcpinfo->flg_mask); printf(" "); print_tcpf(tcpinfo->flg_cmp); } -- cgit v1.2.3