]> git.ipfire.org Git - thirdparty/iptables.git/commit
nft: Fix error reporting for refreshed transactions
authorPhil Sutter <phil@nwl.cc>
Mon, 5 Oct 2020 13:54:35 +0000 (15:54 +0200)
committerPhil Sutter <phil@nwl.cc>
Wed, 7 Oct 2020 10:42:09 +0000 (12:42 +0200)
commite98b825a037807bf6c918eb66ee9682cc4c46183
treec54933084332c154f4bc57061b6f5b6d401dfc41
parent0d77e64e8d9b8a3984b01a4951524dc40f61f4b6
nft: Fix error reporting for refreshed transactions

When preparing a batch from the list of batch objects in nft_action(),
the sequence number used for each object is stored within that object
for later matching against returned error messages. Though if the
transaction has to be refreshed, some of those objects may be skipped,
other objects take over their sequence number and errors are matched to
skipped objects. Avoid this by resetting the skipped object's sequence
number to zero.

Fixes: 58d7de0181f61 ("xtables: handle concurrent ruleset modifications")
Signed-off-by: Phil Sutter <phil@nwl.cc>
Reviewed-by: Florian Westphal <fw@strlen.de>
iptables/nft.c