[NETFILTER]: Trivial but important state fix for ipt_conntrack.

43ee0061 · Harald Welte · David S. Miller · 21e9cc0e · 43ee0061
Commit 43ee0061 authored May 02, 2003 by Harald Welte Committed by David S. Miller May 02, 2003
Hide whitespace changes
Inline Side-by-side

Showing with 5 additions and 1 deletion

net/ipv4/netfilter/ipt_conntrack.c net/ipv4/netfilter/ipt_conntrack.c +5 -1

No files found.
--- a/net/ipv4/netfilter/ipt_conntrack.c
+++ b/net/ipv4/netfilter/ipt_conntrack.c
@@ -27,7 +27,11 @@ match(const struct sk_buff *skb,

 #define FWINV(bool,invflg) ((bool) ^ !!(sinfo->invflags & invflg))

-	statebit = ct ? IPT_CONNTRACK_STATE_INVALID : IPT_CONNTRACK_STATE_BIT(ctinfo);
+	if (ct)
+		statebit = IPT_CONNTRACK_STATE_BIT(ctinfo);
+	else
+		statebit = IPT_CONNTRACK_STATE_INVALID;
+
 	if(sinfo->flags & IPT_CONNTRACK_STATE) {
 		if (ct) {
 			if(ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.src.ip !=