projects
/
platform
/
kernel
/
linux-rpi.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
0d9932b
)
netfilter: nft_quota: fix overquota logic
author
Pablo Neira Ayuso
<pablo@netfilter.org>
Fri, 2 Sep 2016 19:00:58 +0000
(21:00 +0200)
committer
Pablo Neira Ayuso
<pablo@netfilter.org>
Wed, 7 Sep 2016 09:00:56 +0000
(11:00 +0200)
Use xor to decide to break further rule evaluation or not, since the
existing logic doesn't achieve the expected inversion.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_quota.c
patch
|
blob
|
history
diff --git
a/net/netfilter/nft_quota.c
b/net/netfilter/nft_quota.c
index
6eafbf9
..
92b6ff1
100644
(file)
--- a/
net/netfilter/nft_quota.c
+++ b/
net/netfilter/nft_quota.c
@@
-33,7
+33,7
@@
static void nft_quota_eval(const struct nft_expr *expr,
{
struct nft_quota *priv = nft_expr_priv(expr);
- if (
nft_quota(priv, pkt) < 0 && !
priv->invert)
+ if (
(nft_quota(priv, pkt) < 0) ^
priv->invert)
regs->verdict.code = NFT_BREAK;
}