iptables: fix the dead loop when meeting unknown options

Signed-off-by: Changli Gao <xiaosuo@gmail.com>

diff --git a/xshared.c b/xshared.c
index 404a9f5fdf249b9431bc5ea3a222ae080bedad0b..87402b427a851f0aee704f5319f1ca0257d9d712 100644 (file)
--- a/xshared.c
+++ b/xshared.c
@@ -92,7 +92,7 @@ static bool should_load_proto(struct iptables_command_state *cs)
        if (find_proto(cs->protocol, XTF_DONT_LOAD,
            cs->options & OPT_NUMERIC, NULL) == NULL)
                return true;
-       return cs->proto_used;
+       return !cs->proto_used;
 }
 
 struct xtables_match *load_proto(struct iptables_command_state *cs)