diff options
| author | Phil Sutter <phil@nwl.cc> | 2023-04-28 14:33:43 +0200 |
|---|---|---|
| committer | Phil Sutter <phil@nwl.cc> | 2023-04-28 15:05:45 +0200 |
| commit | 092e4b022152addc94524e2ba0cb608dac1a3a08 (patch) | |
| tree | 01400f00dc8f525e55fc25493112c158084e9ac7 | |
| parent | 465470184950d9035dcd1101c1f413f8a2051427 (diff) | |
| download | iptables-092e4b022152addc94524e2ba0cb608dac1a3a08.tar.gz | |
arptables: Fix parsing of inverted 'arp operation' match
The wrong bit was set in 'invflags', probably due to copy'n'paste from
the previous case.
Fixes: 84909d171585d ("xtables: bootstrap ARP compatibility layer for nftables")
Signed-off-by: Phil Sutter <phil@nwl.cc>
| -rw-r--r-- | iptables/nft-arp.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/iptables/nft-arp.c b/iptables/nft-arp.c index 8963573a..a8e49f44 100644 --- a/iptables/nft-arp.c +++ b/iptables/nft-arp.c @@ -244,7 +244,7 @@ static void nft_arp_parse_payload(struct nft_xt_ctx *ctx, fw->arp.arhln = ar_hln; fw->arp.arhln_mask = 0xff; if (inv) - fw->arp.invflags |= IPT_INV_ARPOP; + fw->arp.invflags |= IPT_INV_ARPHLN; break; case offsetof(struct arphdr, ar_pln): get_cmp_data(e, &ar_pln, sizeof(ar_pln), &inv); |