Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit d088be80 authored by Pablo Neira Ayuso's avatar Pablo Neira Ayuso
Browse files

netfilter: nf_tables: reset rule number counter after jump and goto 



Otherwise we start incrementing the rule number counter from the
previous chain iteration.

Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent a8951d58

net/netfilter/nf_tables_core.c

+2 −1
Original line number Diff line number Diff line
@@ -123,7 +123,7 @@ nft_do_chain(struct nft_pktinfo *pkt, const struct nf_hook_ops *ops) 
	struct nft_data data[NFT_REG_MAX + 1];

	unsigned int stackptr = 0;

	struct nft_jumpstack jumpstack[NFT_JUMP_STACK_SIZE];

	int rulenum = 0;

	int rulenum;

	/*

	 * Cache cursor to avoid problems in case that the cursor is updated

	 * while traversing the ruleset.
@@ -131,6 +131,7 @@ nft_do_chain(struct nft_pktinfo *pkt, const struct nf_hook_ops *ops) 
	unsigned int gencursor = ACCESS_ONCE(chain->net->nft.gencursor);



do_chain:

	rulenum = 0;

	rule = list_entry(&chain->rules, struct nft_rule, list);

next_rule:

	data[NFT_REG_VERDICT].verdict = NFT_CONTINUE;