segtree: incorrect handling of last element in get_set_decompose()

Add range to the list of matching elements.

Fixes: 95629758a5ec ("segtree: bogus range via get set element on existing elements")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

diff --git a/src/segtree.c b/src/segtree.c
index dc457d6bc1b7df9b082536b30c28b77b739e387f..4ee09884cbde604788d2ccc22c246edd6402dd4a 100644 (file)
--- a/src/segtree.c
+++ b/src/segtree.c
@@ -753,7 +753,7 @@ int get_set_decompose(struct table *table, struct set *set)
        if (left) {
                range = get_set_interval_end(table, set->handle.set.name, left);
                if (range)
-                       compound_expr_add(new_init, left);
+                       compound_expr_add(new_init, range);
                else
                        compound_expr_add(new_init, expr_clone(left));
        }