From 85512f09680a798ebe92e96ad62eeae863fbc791 Mon Sep 17 00:00:00 2001 From: Pablo Neira Ayuso Date: Tue, 30 Jul 2013 11:39:59 +0200 Subject: nft: fix match revision lookup for IPv6 IPT_SO_GET_REVISION_MATCH != IP6T_SO_GET_REVISION_MATCH, thus, the revision infrastructure was looking for targets instead matches. --- iptables/nft.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'iptables') diff --git a/iptables/nft.c b/iptables/nft.c index 68fc1539..bbe5e396 100644 --- a/iptables/nft.c +++ b/iptables/nft.c @@ -2730,7 +2730,8 @@ int nft_compatible_revision(const char *name, uint8_t rev, int opt) uint32_t portid, seq, type; int ret = 0; - if (opt == IPT_SO_GET_REVISION_MATCH) + if (opt == IPT_SO_GET_REVISION_MATCH || + opt == IP6T_SO_GET_REVISION_MATCH) type = 0; else type = 1; -- cgit v1.2.3