diff options
| author |   Christoph Paasch <christoph.paasch@gmail.com> | 2009-03-16 15:51:29 +0100 |
|---|---|---|
| committer |   Patrick McHardy <kaber@trash.net> | 2009-03-16 15:51:29 +0100 |
| commit | ec8d540969da9a70790e9028d57b5b577dd7aa77 (patch) | |
| tree | 375d23d65f3288776de1585cccae5270b90a56af /include/linux/kernel.h | |
| parent | netfilter: ctnetlink: fix crash during expectation creation (diff) | |
| download | wireguard-linux-ec8d540969da9a70790e9028d57b5b577dd7aa77.tar.xz wireguard-linux-ec8d540969da9a70790e9028d57b5b577dd7aa77.zip | |
netfilter: conntrack: fix dropping packet after l4proto->packet()
We currently use the negative value in the conntrack code to encode
the packet verdict in the error. As NF_DROP is equal to 0, inverting
NF_DROP makes no sense and, as a result, no packets are ever dropped.
Signed-off-by: Christoph Paasch <christoph.paasch@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Diffstat (limited to 'include/linux/kernel.h')
0 files changed, 0 insertions, 0 deletions