diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2023-04-04 15:34:05 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2023-11-02 11:56:19 +0100 |
| commit | f7b554de7f797a14b0ff5840de411c66d2ebacec (patch) | |
| tree | b82c29b9b5ff11b04850b4d4c89dc5ac14cf0d7d /src | |
| parent | d35848b67022487f34498af127c7dfcc200142d3 (diff) | |
netlink_delinearize: do not reset protocol context for nat protocol expression
commit f3b27274bfdb75dc29301bdd537ee6fec6d4e7c1 upstream backport.
This patch reverts 403b46ada490 ("netlink_delinearize: kill dependency
before eval of 'redirect' stmt"). Since ("evaluate: bogus missing
transport protocol"), this workaround is not required anymore.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'src')
| -rw-r--r-- | src/netlink_delinearize.c | 4 |
1 files changed, 1 insertions, 3 deletions
diff --git a/src/netlink_delinearize.c b/src/netlink_delinearize.c index b413f60e..e6c9fa65 100644 --- a/src/netlink_delinearize.c +++ b/src/netlink_delinearize.c @@ -3092,10 +3092,8 @@ static void rule_parse_postprocess(struct netlink_parse_ctx *ctx, struct rule *r case STMT_NAT: if (stmt->nat.addr != NULL) expr_postprocess(&rctx, &stmt->nat.addr); - if (stmt->nat.proto != NULL) { - payload_dependency_reset(&rctx.pdctx); + if (stmt->nat.proto != NULL) expr_postprocess(&rctx, &stmt->nat.proto); - } break; case STMT_TPROXY: if (stmt->tproxy.addr) |