From: Tom Eastep <teastep@shorewall.net>
Date: Mon, 19 Sep 2005 15:14:04 +0000 (+0000)
Subject: The conntrack match extension doesn't handle address inversion correctly. (Tom Eastep)
X-Git-Tag: v1.3.4~2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=55548fd74331be4507174bd3dfb65640c8eb909d;p=thirdparty%2Fiptables.git

The conntrack match extension doesn't handle address inversion correctly. (Tom Eastep)
---

diff --git a/extensions/libipt_conntrack.c b/extensions/libipt_conntrack.c
index 55216848..27870b1e 100644
--- a/extensions/libipt_conntrack.c
+++ b/extensions/libipt_conntrack.c
@@ -414,8 +414,8 @@ print_addr(struct in_addr *addr, struct in_addr *mask, int inv, int numeric)
 {
 	char buf[BUFSIZ];
 
-        if (inv)
-               	fputc('!', stdout);
+        if (inv) 
+               	printf("! ");
 
 	if (mask->s_addr == 0L && !numeric)
 		printf("%s ", "anywhere");