mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
synced 2026-05-14 06:30:20 -04:00
netfilter: nf_tables: fix a wrong check to skip the inactive rules
nft_genmask_cur has already done left-shift operator on the gencursor,
so there's no need to do left-shift operator on it again.
Fixes: ea4bd995b0 ("netfilter: nf_tables: add transaction helper functions")
Cc: Patrick McHardy <kaber@trash.net>
Signed-off-by: Liping Zhang <liping.zhang@spreadtrum.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
This commit is contained in:
committed by
Pablo Neira Ayuso
parent
a02f424863
commit
8fff1722f7
@@ -143,7 +143,7 @@ nft_do_chain(struct nft_pktinfo *pkt, void *priv)
|
||||
list_for_each_entry_continue_rcu(rule, &chain->rules, list) {
|
||||
|
||||
/* This rule is not active, skip. */
|
||||
if (unlikely(rule->genmask & (1 << gencursor)))
|
||||
if (unlikely(rule->genmask & gencursor))
|
||||
continue;
|
||||
|
||||
rulenum++;
|
||||
|
||||
Reference in New Issue
Block a user