From f68f7b30f504c556581bc41159c1b53278b3fc8e Mon Sep 17 00:00:00 2001 From: Ken-ichirou MATSUZAWA Date: Tue, 28 Feb 2017 13:55:26 +0900 Subject: conntrack: fix missing break in setobjopt_undo_dnat() Otherwise we fall into the IPv6 case. Signed-off-by Ken-ichirou MATSUZAWA Signed-off-by: Pablo Neira Ayuso --- src/conntrack/objopt.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/conntrack/objopt.c b/src/conntrack/objopt.c index 119a83a..fb43d6c 100644 --- a/src/conntrack/objopt.c +++ b/src/conntrack/objopt.c @@ -81,6 +81,7 @@ static void setobjopt_undo_dnat(struct nf_conntrack *ct) ct->dnat.max_ip.v4 = ct->dnat.min_ip.v4; ct->repl.src.v4 = ct->head.orig.dst.v4; set_bit(ATTR_DNAT_IPV4, ct->head.set); + break; case AF_INET6: memcpy(&ct->dnat.min_ip.v6, &ct->repl.src.v6, sizeof(struct in6_addr)); -- cgit v1.2.3