fastCheck() on multiple lines was using the last lines action instead
of the DUNNO state replacement for inversion.
This updated fastCheck() to only use a config lines result state if that
line fully matched. In accordance with documented ACL behaviour.
debugs(28, 5, "aclCheckFast: list: " << accessList);
const acl_access *acl = cbdataReference(accessList);
while (acl != NULL && cbdataReferenceValid(acl)) {
- currentAnswer(acl->allow);
matchAclList(acl->aclList, true);
if (finished()) {
+ currentAnswer(acl->allow);
PROF_stop(aclCheckFast);
cbdataReferenceDone(acl);
return currentAnswer();