From ed839159edf8bda8e9196f1056c4038c22d78bfd Mon Sep 17 00:00:00 2001 From: Jacek Tomasiak Date: Mon, 19 Jun 2023 12:44:54 +0200 Subject: iptables: Fix setting of ipv6 counters When setting counters using ip6tables-nft -c X Y the X and Y values were not stored. This is a fix based on 9baf3bf0e77dab6ca4b167554ec0e57b65d0af01 but applied to the nft variant of ipv6 not the legacy. Closes: https://bugzilla.netfilter.org/show_bug.cgi?id=1647 Fixes: 0391677c1a0b2 ("xtables: add IPv6 support") Signed-off-by: Jacek Tomasiak Signed-off-by: Jacek Tomasiak Signed-off-by: Phil Sutter --- iptables/xshared.c | 3 +++ 1 file changed, 3 insertions(+) (limited to 'iptables/xshared.c') diff --git a/iptables/xshared.c b/iptables/xshared.c index a2350103..28c65fae 100644 --- a/iptables/xshared.c +++ b/iptables/xshared.c @@ -1982,6 +1982,9 @@ void ipv6_post_parse(int command, struct iptables_command_state *cs, if (args->goto_set) cs->fw6.ipv6.flags |= IP6T_F_GOTO; + /* nft-variants use cs->counters, legacy uses cs->fw6.counters */ + cs->counters.pcnt = args->pcnt_cnt; + cs->counters.bcnt = args->bcnt_cnt; cs->fw6.counters.pcnt = args->pcnt_cnt; cs->fw6.counters.bcnt = args->bcnt_cnt; -- cgit v1.2.3