netfilter: nft_meta: fix iifgroup matching
authorFlorian Westphal <fw@strlen.de>
Sun, 2 Aug 2020 01:27:03 +0000 (03:27 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 19 Aug 2020 06:24:05 +0000 (08:24 +0200)
commit1dcab82e6aab0da0791ded7a4d6b76e0257fccae
tree0589d5ce9a4880ae7fece3fe60da84b8c3cab7ce
parent7bf75a893dc9c2da2347f90175751ee6374a6350
netfilter: nft_meta: fix iifgroup matching

[ Upstream commit 78470d9d0d9f2f8d16f28382a4071568e839c0d5 ]

iifgroup matching erroneously checks the output interface.

Fixes: 8724e819cc9a ("netfilter: nft_meta: move all interface related keys to helper")
Reported-by: Demi M. Obenour <demiobenour@gmail.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nft_meta.c