diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2025-03-26 21:54:04 +0100 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2025-06-19 00:01:14 +0200 |
| commit | 11471a51cec7e1f0429bff4dd44686fc91987bb9 (patch) | |
| tree | 7f37e9352180a7fb07c0fca33fa2754e0f171097 | |
| parent | 03f92014110323fcea3831438019a167c8f797cc (diff) | |
optimize: incorrect comparison for reject statement
commit abab6e60c755aef7e1ab9d3320effa714a0b49e2 upstream.
Logic is reverse, this should returns false if the compared reject
expressions are not the same.
Fixes: 38d48fe57fff ("optimize: fix reject statement")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
| -rw-r--r-- | src/optimize.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/optimize.c b/src/optimize.c index 8fc2b901..e200819c 100644 --- a/src/optimize.c +++ b/src/optimize.c @@ -232,7 +232,7 @@ static bool __stmt_type_eq(const struct stmt *stmt_a, const struct stmt *stmt_b, if (!stmt_a->reject.expr) return true; - if (__expr_cmp(stmt_a->reject.expr, stmt_b->reject.expr)) + if (!__expr_cmp(stmt_a->reject.expr, stmt_b->reject.expr)) return false; break; case STMT_NAT: |