Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit d61f89e9 authored by Jan Engelhardt's avatar Jan Engelhardt Committed by David S. Miller
Browse files

[NETFILTER]: xt_conntrack: fix missing boolean clamping 



Signed-off-by: default avatarJan Engelhardt <jengelh@computergmbh.de>
Signed-off-by: default avatarPatrick McHardy <kaber@trash.net>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent 4e29e9ec

net/netfilter/xt_conntrack.c

+1 −1
Original line number Diff line number Diff line
@@ -231,7 +231,7 @@ conntrack_mt(const struct sk_buff *skb, const struct net_device *in, 
			if (test_bit(IPS_DST_NAT_BIT, &ct->status))

				statebit |= XT_CONNTRACK_STATE_DNAT;

		}

		if ((info->state_mask & statebit) ^

		if (!!(info->state_mask & statebit) ^

		    !(info->invert_flags & XT_CONNTRACK_STATE))

			return false;

	}