netfilter: xt_TPROXY: fix invflags check in tproxy_tg6_check()
authorPablo Neira Ayuso <pablo@netfilter.org>
Fri, 20 Mar 2015 12:56:06 +0000 (13:56 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 20 Mar 2015 13:35:33 +0000 (14:35 +0100)
We have to check for IP6T_INV_PROTO in invflags, instead of flags.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Acked-by: Balazs Scheidler <bazsi@balabit.hu>
net/netfilter/xt_TPROXY.c

index ef8a926752a97542f6f2f8eeb378e150958bff3d..50e1e5aaf4ce82ff7bbf1ee7171aaa51d54eefd1 100644 (file)
@@ -513,8 +513,8 @@ static int tproxy_tg6_check(const struct xt_tgchk_param *par)
 {
        const struct ip6t_ip6 *i = par->entryinfo;
 
-       if ((i->proto == IPPROTO_TCP || i->proto == IPPROTO_UDP)
-           && !(i->flags & IP6T_INV_PROTO))
+       if ((i->proto == IPPROTO_TCP || i->proto == IPPROTO_UDP) &&
+           !(i->invflags & IP6T_INV_PROTO))
                return 0;
 
        pr_info("Can be used only in combination with "