diff options
| author | Patrick McHardy <kaber@trash.net> | 2005-03-11 03:16:16 -0800 |
|---|---|---|
| committer | Linus Torvalds <torvalds@ppc970.osdl.org> | 2005-03-11 03:16:16 -0800 |
| commit | 12dd2ea4409a7b2829641b5af9ec14f68295d718 (patch) | |
| tree | 3ad343000a1061c28294126faa101bb72e28922d /include/linux | |
| parent | ec43f55fee8179b753f5b389185deeceb03a7f37 (diff) | |
[PATCH] netfilter: Fix iptables userspace compatibility breakage
ip_tables failed to recognize IPT_RETURN because it was defined relative
to NF_MAX_VERDICT (which changed) and returned it to nf_iterate(). The
old value of IPT_RETURN matches NF_REPEAT, so the hook was called again
and again.
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
Diffstat (limited to 'include/linux')
| -rw-r--r-- | include/linux/netfilter_arp/arp_tables.h | 2 | ||||
| -rw-r--r-- | include/linux/netfilter_ipv4/ip_tables.h | 2 | ||||
| -rw-r--r-- | include/linux/netfilter_ipv6/ip6_tables.h | 2 |
3 files changed, 3 insertions, 3 deletions
diff --git a/include/linux/netfilter_arp/arp_tables.h b/include/linux/netfilter_arp/arp_tables.h index b16b4799e27e..d759a637bded 100644 --- a/include/linux/netfilter_arp/arp_tables.h +++ b/include/linux/netfilter_arp/arp_tables.h @@ -154,7 +154,7 @@ struct arpt_entry #define ARPT_CONTINUE 0xFFFFFFFF /* For standard target */ -#define ARPT_RETURN (-NF_MAX_VERDICT - 1) +#define ARPT_RETURN (-NF_REPEAT - 1) /* The argument to ARPT_SO_GET_INFO */ struct arpt_getinfo diff --git a/include/linux/netfilter_ipv4/ip_tables.h b/include/linux/netfilter_ipv4/ip_tables.h index 91f3594d3bfd..12ce47808e7d 100644 --- a/include/linux/netfilter_ipv4/ip_tables.h +++ b/include/linux/netfilter_ipv4/ip_tables.h @@ -166,7 +166,7 @@ struct ipt_entry #define IPT_CONTINUE 0xFFFFFFFF /* For standard target */ -#define IPT_RETURN (-NF_MAX_VERDICT - 1) +#define IPT_RETURN (-NF_REPEAT - 1) /* TCP matching stuff */ struct ipt_tcp diff --git a/include/linux/netfilter_ipv6/ip6_tables.h b/include/linux/netfilter_ipv6/ip6_tables.h index 8fa1bf0104ee..f1ce3b009853 100644 --- a/include/linux/netfilter_ipv6/ip6_tables.h +++ b/include/linux/netfilter_ipv6/ip6_tables.h @@ -166,7 +166,7 @@ struct ip6t_entry #define IP6T_CONTINUE 0xFFFFFFFF /* For standard target */ -#define IP6T_RETURN (-NF_MAX_VERDICT - 1) +#define IP6T_RETURN (-NF_REPEAT - 1) /* TCP matching stuff */ struct ip6t_tcp |