only set revisions on real targets, not on jumps. (Pablo Neira)

diff --git a/iptables.c b/iptables.c
index cc47e9808f4138c277be2ad5c6f033d7a455214e..cc8d423c0b95ca7b78d655ffc51edf3e816d250f 100644 (file)
--- a/iptables.c
+++ b/iptables.c
@@ -2394,7 +2394,9 @@ int do_command(int argc, char *argv[], char **table, iptc_handle_t *handle)
                        target->t = fw_calloc(1, size);
                        target->t->u.target_size = size;
                        strcpy(target->t->u.user.name, jumpto);
-                       set_revision(target->t->u.user.name, target->revision);
+                       if (!iptc_is_chain(jumpto, *handle))
+                               set_revision(target->t->u.user.name,
+                                            target->revision);
                        if (target->init != NULL)
                                target->init(target->t, &fw.nfcache);
                }