From: Phil Sutter <phil@nwl.cc>
Date: Wed, 22 Nov 2023 02:58:18 +0000 (+0100)
Subject: xshared: do_parse: Ignore '-j CONTINUE'
X-Git-Tag: v1.8.11~158
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c0bd98c9339b4975c9d52739d638a3c2bdf9a7ff;p=thirdparty%2Fiptables.git

xshared: do_parse: Ignore '-j CONTINUE'

While iptables does not support his NOP, arptables man page claims it
does (although legacy arptables rejects it) and ebtables prefers to
print it instead of omitting the '-j' option.

Accept and ignore the target when parsing to at least fix for
arptables-nft and prepare for ebtables-nft using do_parse() as well.

Signed-off-by: Phil Sutter <phil@nwl.cc>
---

diff --git a/iptables/xshared.c b/iptables/xshared.c
index c4d7a266..1b02f35a 100644
--- a/iptables/xshared.c
+++ b/iptables/xshared.c
@@ -1634,7 +1634,8 @@ void do_parse(int argc, char *argv[],
 		case 'j':
 			set_option(&cs->options, OPT_JUMP, &args->invflags,
 				   invert);
-			command_jump(cs, optarg);
+			if (strcmp(optarg, "CONTINUE"))
+				command_jump(cs, optarg);
 			break;
 
 		case 'i':