From: Pablo Neira Ayuso <pablo@netfilter.org>
Date: Wed, 26 Mar 2025 20:54:04 +0000 (+0100)
Subject: optimize: incorrect comparison for reject statement
X-Git-Tag: v1.1.2~26
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=abab6e60c755aef7e1ab9d3320effa714a0b49e2;p=thirdparty%2Fnftables.git

optimize: incorrect comparison for reject statement

Logic is reverse, this should returns false if the compared reject
expressions are not the same.

Fixes: 38d48fe57fff ("optimize: fix reject statement")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
---

diff --git a/src/optimize.c b/src/optimize.c
index 05d8084b..bb849267 100644
--- a/src/optimize.c
+++ b/src/optimize.c
@@ -235,7 +235,7 @@ static bool __stmt_type_eq(const struct stmt *stmt_a, const struct stmt *stmt_b,
 		if (!stmt_a->reject.expr)
 			return true;
 
-		if (__expr_cmp(stmt_a->reject.expr, stmt_b->reject.expr))
+		if (!__expr_cmp(stmt_a->reject.expr, stmt_b->reject.expr))
 			return false;
 		break;
 	case STMT_NAT: