From: Florian Westphal Date: Sun, 2 Aug 2020 01:27:03 +0000 (+0200) Subject: netfilter: nft_meta: fix iifgroup matching X-Git-Tag: v5.15~3197^2~16^2~3 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=78470d9d0d9f2f8d16f28382a4071568e839c0d5;p=platform%2Fkernel%2Flinux-starfive.git netfilter: nft_meta: fix iifgroup matching iifgroup matching erroneously checks the output interface. Fixes: 8724e819cc9a ("netfilter: nft_meta: move all interface related keys to helper") Reported-by: Demi M. Obenour Signed-off-by: Florian Westphal Signed-off-by: Pablo Neira Ayuso --- diff --git a/net/netfilter/nft_meta.c b/net/netfilter/nft_meta.c index 951b6e8..7bc6537 100644 --- a/net/netfilter/nft_meta.c +++ b/net/netfilter/nft_meta.c @@ -253,7 +253,7 @@ static bool nft_meta_get_eval_ifname(enum nft_meta_keys key, u32 *dest, return false; break; case NFT_META_IIFGROUP: - if (!nft_meta_store_ifgroup(dest, nft_out(pkt))) + if (!nft_meta_store_ifgroup(dest, nft_in(pkt))) return false; break; case NFT_META_OIFGROUP: