From: Arturo Borrero <arturo.borrero.glez@gmail.com>
Date: Wed, 6 Apr 2016 12:10:52 +0000 (+0200)
Subject: extensions/libxt_tcp: fix nftables translate flags value, 'none' vs '0x0'
X-Git-Tag: v1.6.1~94
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=e65b672fb1aec0e71305bcbd3394d8073dc5b158;p=thirdparty%2Fiptables.git

extensions/libxt_tcp: fix nftables translate flags value, 'none' vs '0x0'

The iptables command:
 -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG NONE

should translate to:
 tcp flags & fin|syn|rst|psh|ack|urg == 0x0

instead of:
 tcp flags & fin|syn|rst|psh|ack|urg == none

Reported-by: Vadim A. Misbakh-Soloviov <netfilter@mva.name>
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>
Tested-by: Vadim A. Misbakh-Soloviov <netfilter@mva.name>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
---

diff --git a/extensions/libxt_tcp.c b/extensions/libxt_tcp.c
index 6a85ed46..2a14035d 100644
--- a/extensions/libxt_tcp.c
+++ b/extensions/libxt_tcp.c
@@ -390,7 +390,7 @@ static void print_tcp_xlate(struct xt_xlate *xl, uint8_t flags)
 	}
 
 	if (!have_flag)
-		xt_xlate_add(xl, "none");
+		xt_xlate_add(xl, "0x0");
 }
 
 static int tcp_xlate(const void *ip, const struct xt_entry_match *match,