netfilter: fix nf_l4proto_log_invalid to log invalid packets
authorAndrei Vagin <avagin@gmail.com>
Wed, 17 Apr 2019 16:49:44 +0000 (09:49 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 16 May 2019 17:41:24 +0000 (19:41 +0200)
commit3a53fa469d6001dc41ab9ef0dc909287d67ab716
treeedeeebf4f655ed69e9868053ae7bed2bd22cf0b2
parent5bc3d44918213d6a2770f1820aefcb06e94557aa
netfilter: fix nf_l4proto_log_invalid to log invalid packets

[ Upstream commit d48668052b2603b6262459625c86108c493588dd ]

It doesn't log a packet if sysctl_log_invalid isn't equal to protonum
OR sysctl_log_invalid isn't equal to IPPROTO_RAW. This sentence is
always true. I believe we need to replace OR to AND.

Cc: Florian Westphal <fw@strlen.de>
Fixes: c4f3db1595827 ("netfilter: conntrack: add and use nf_l4proto_log_invalid")
Signed-off-by: Andrei Vagin <avagin@gmail.com>
Acked-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nf_conntrack_proto.c