From: Pablo Neira Ayuso <pablo@netfilter.org>
Date: Tue, 30 Jul 2013 09:39:59 +0000 (+0200)
Subject: nft: fix match revision lookup for IPv6
X-Git-Tag: v1.6.0~111^2~70
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=85512f09680a798ebe92e96ad62eeae863fbc791;p=thirdparty%2Fiptables.git

nft: fix match revision lookup for IPv6

IPT_SO_GET_REVISION_MATCH != IP6T_SO_GET_REVISION_MATCH, thus,
the revision infrastructure was looking for targets instead
matches.
---

diff --git a/iptables/nft.c b/iptables/nft.c
index 68fc1539..bbe5e396 100644
--- a/iptables/nft.c
+++ b/iptables/nft.c
@@ -2730,7 +2730,8 @@ int nft_compatible_revision(const char *name, uint8_t rev, int opt)
 	uint32_t portid, seq, type;
 	int ret = 0;
 
-	if (opt == IPT_SO_GET_REVISION_MATCH)
+	if (opt == IPT_SO_GET_REVISION_MATCH ||
+	    opt == IP6T_SO_GET_REVISION_MATCH)
 		type = 0;
 	else
 		type = 1;