netfilter: ctnetlink: fix filtering with CTA_TUPLE_REPLY
authorFlorent Fourcot <florent.fourcot@wifirst.fr>
Wed, 3 Nov 2021 22:21:54 +0000 (23:21 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 1 Dec 2021 08:19:02 +0000 (09:19 +0100)
commita3d829e5f37590b768e2a0bef2f17ee1833ef2e9
tree44f9ea0951d9fda9bbbd58c4ba4ecd341f8c2dc2
parenta8a917058faf4abaec9fb614bb6d5f8fe3529ec6
netfilter: ctnetlink: fix filtering with CTA_TUPLE_REPLY

[ Upstream commit ad81d4daf6a3f4769a346e635d5e1e967ca455d9 ]

filter->orig_flags was used for a reply context.

Fixes: cb8aa9a3affb ("netfilter: ctnetlink: add kernel side filtering for dump")
Signed-off-by: Florent Fourcot <florent.fourcot@wifirst.fr>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nf_conntrack_netlink.c