]> git.ipfire.org Git - thirdparty/iptables.git/commit
option: fix ignored negation before implicit extension loading
authorJan Engelhardt <jengelh@medozas.de>
Tue, 7 Jun 2011 20:20:13 +0000 (22:20 +0200)
committerJan Engelhardt <jengelh@medozas.de>
Tue, 7 Jun 2011 20:33:13 +0000 (22:33 +0200)
commit780607f8b040a47cd2d4775376e2d30f567dc049
tree1dc9372b7556774c0164241929b4c4edfbf163f1
parent6a74dc80fcdf48e2b149e92aee08f3445055ea3b
option: fix ignored negation before implicit extension loading

`iptables -A INPUT -p tcp ! --syn` forgot the negation, i.e. it
was not present in a subsequent `iptables -S`.

Commit v1.4.11~77^2~9 missed the fact that after autoloading a proto
extension, cs.invert must not be touched until the next getopt call.
This is now fixed by having command_default return a value to indicate
whether to jump or not.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
iptables/ip6tables.c
iptables/iptables.c
iptables/xshared.c
iptables/xshared.h
tests/options-most.rules