[NETFILTER]: get_unique_tuple doesn't always return unique tuple.

get_unique_tuple doesn't check that the tuple is unique if it finds
a hash_by_src match.

net/ipv4/netfilter/ip_nat_core.c

@@ -421,6 +421,7 @@ get_unique_tuple(struct ip_conntrack_tuple *tuple,
 			*tuple = ((struct ip_conntrack_tuple)
 				  { *manip, orig_tuple->dst });
 			DEBUGP("get_unique_tuple: Found current src map\n");
+			if (!ip_nat_used_tuple(tuple, conntrack))
 				return 1;
 		}
 	}