Commit ad81d4da authored by Florent Fourcot's avatar Florent Fourcot Committed by Pablo Neira Ayuso
Browse files

netfilter: ctnetlink: fix filtering with CTA_TUPLE_REPLY 



filter->orig_flags was used for a reply context.

Fixes: cb8aa9a3 ("netfilter: ctnetlink: add kernel side filtering for dump")
Signed-off-by: default avatarFlorent Fourcot <florent.fourcot@wifirst.fr>
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent 85c0c8b3

net/netfilter/nf_conntrack_netlink.c

+1 −1
Original line number Diff line number Diff line
@@ -1011,7 +1011,7 @@ ctnetlink_alloc_filter(const struct nlattr * const cda[], u8 family) 
						   CTA_TUPLE_REPLY,

						   filter->family,

						   &filter->zone,

						   filter->orig_flags);

						   filter->reply_flags);

		if (err < 0) {

			err = -EINVAL;

			goto err_filter;