From: Phil Sutter <phil@nwl.cc>
Date: Tue, 3 Aug 2021 08:55:20 +0000 (+0200)
Subject: nft: Fix for non-verbose check command
X-Git-Tag: v1.8.8~142
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=57d1422dbbc41c36ed2e9f6c67aa040c65a429a0;p=thirdparty%2Fiptables.git

nft: Fix for non-verbose check command

Check command was unconditionally verbose since v1.8.5. Make it respect
--verbose option again.

Fixes: a7f1e208cdf9c ("nft: split parsing from netlink commands")
Signed-off-by: Phil Sutter <phil@nwl.cc>
---

diff --git a/iptables/nft.c b/iptables/nft.c
index f1deb82f..795dff86 100644
--- a/iptables/nft.c
+++ b/iptables/nft.c
@@ -3126,7 +3126,7 @@ static int nft_prepare(struct nft_handle *h)
 		case NFT_COMPAT_RULE_CHECK:
 			assert_chain_exists(h, cmd->table, cmd->jumpto);
 			ret = nft_rule_check(h, cmd->chain, cmd->table,
-					     cmd->obj.rule, cmd->rulenum);
+					     cmd->obj.rule, cmd->verbose);
 			break;
 		case NFT_COMPAT_RULE_ZERO:
 			ret = nft_rule_zero_counters(h, cmd->chain, cmd->table,