nfct_sizeof() allows memcpy() of ct objects, which violates the
library design (that aims to hide binary layout).
We use nfct_copy() with the override flag instead as added by
libnetfilter_conntrack 0.9.1.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* Thus, we only copy the object once, then it is used
* by the several output plugin instance that reference
* it by means of a pointer. */
- memcpy(cpi->ct, ct, nfct_sizeof(ct));
+ nfct_copy(cpi->ct, ct, NFCT_CP_OVERRIDE);
/* since we support the re-use of one instance in
* several different stacks, we duplicate the message