Commit 558254b0 authored by Phil Sutter's avatar Phil Sutter Committed by Pablo Neira Ayuso
Browse files

netfilter: nft_limit: Clone packet limits' cost value 



When cloning a packet-based limit expression, copy the cost value as
well. Otherwise the new limit is not functional anymore.

Fixes: 3b9e2ea6 ("netfilter: nft_limit: move stateful fields out of expression data")
Signed-off-by: default avatarPhil Sutter <phil@nwl.cc>
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent 52077804

net/netfilter/nft_limit.c

+2 −0
Original line number Diff line number Diff line
@@ -213,6 +213,8 @@ static int nft_limit_pkts_clone(struct nft_expr *dst, const struct nft_expr *src 
	struct nft_limit_priv_pkts *priv_dst = nft_expr_priv(dst);

	struct nft_limit_priv_pkts *priv_src = nft_expr_priv(src);



	priv_dst->cost = priv_src->cost;



	return nft_limit_clone(&priv_dst->limit, &priv_src->limit);

}