diff options
| author | Patrick McHardy <kaber@trash.net> | 2014-02-12 21:13:16 +0000 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2014-02-14 11:37:33 +0100 |
| commit | ce898ecb5a3c0027855dcee21ed99690b867d017 (patch) | |
| tree | 56b6142b21fb9febc713e6aeb23d39ac45fd022e | |
| parent | 20e7c4e80dcd01dad5e6c8b32455228b8fe9c619 (diff) | |
| download | op-kernel-dev-ce898ecb5a3c0027855dcee21ed99690b867d017.zip op-kernel-dev-ce898ecb5a3c0027855dcee21ed99690b867d017.tar.gz | |
netfilter: nft_reject_inet: fix unintended fall-through in switch-statatement
For IPv4 packets, we call both IPv4 and IPv6 reject.
Reported-by: Dave Jones <davej@redhat.com>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
| -rw-r--r-- | net/netfilter/nft_reject_inet.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/net/netfilter/nft_reject_inet.c b/net/netfilter/nft_reject_inet.c index 8a310f2..b718a52 100644 --- a/net/netfilter/nft_reject_inet.c +++ b/net/netfilter/nft_reject_inet.c @@ -21,9 +21,9 @@ static void nft_reject_inet_eval(const struct nft_expr *expr, { switch (pkt->ops->pf) { case NFPROTO_IPV4: - nft_reject_ipv4_eval(expr, data, pkt); + return nft_reject_ipv4_eval(expr, data, pkt); case NFPROTO_IPV6: - nft_reject_ipv6_eval(expr, data, pkt); + return nft_reject_ipv6_eval(expr, data, pkt); } } |
