set match negation bug fixed

diff --git a/extensions/libipt_set.c b/extensions/libipt_set.c
index e485f054ca3720a9c981c12b99f1be7a1da5df96..eb127dd57ae0cc315292844de7daa017b9d85f7b 100644 (file)
--- a/extensions/libipt_set.c
+++ b/extensions/libipt_set.c
@@ -112,7 +112,7 @@ print_match(const char *prefix, const struct ipt_set_info *info)
 
        get_set_byid(setname, info->index);
        printf("%s%s %s", 
-              (info->flags[0] & IPSET_MATCH_INV) ? "!" : "",
+              (info->flags[0] & IPSET_MATCH_INV) ? "! " : "",
               prefix,
               setname); 
        for (i = 0; i < IP_SET_MAX_BINDINGS; i++) {

diff --git a/extensions/libipt_set.h b/extensions/libipt_set.h
index 0d6b329c30712dd04e5873899c95e5d0bf95c207..9e468b3d13a901b24bf2849f9025f15f0ce9cc66 100644 (file)
--- a/extensions/libipt_set.h
+++ b/extensions/libipt_set.h
@@ -51,7 +51,7 @@ static int get_set_getsockopt(void *data, size_t * size)
 static void get_set_byname(const char *setname, struct ipt_set_info *info)
 {
        struct ip_set_req_get_set req;
-       int size = sizeof(struct ip_set_req_get_set);
+       size_t size = sizeof(struct ip_set_req_get_set);
        int res;
 
        req.op = IP_SET_OP_GET_BYNAME;
@@ -78,7 +78,7 @@ static void get_set_byname(const char *setname, struct ipt_set_info *info)
 static void get_set_byid(char * setname, ip_set_id_t index)
 {
        struct ip_set_req_get_set req;
-       int size = sizeof(struct ip_set_req_get_set);
+       size_t size = sizeof(struct ip_set_req_get_set);
        int res;
 
        req.op = IP_SET_OP_GET_BYINDEX;