diff options
author | Pablo Neira Ayuso <pablo@netfilter.org> | 2014-01-10 15:11:25 +0100 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2014-01-10 18:26:13 +0100 |
commit | 8f46df184c31f3e97ef8c08fbf83c776f4eb5e21 (patch) | |
tree | 41e4b454aaf584eb01581725eb366ac062846ab6 /net/netfilter | |
parent | 11b57f90257c1d6a91cee720151b69e0c2020cf6 (diff) | |
download | linux-8f46df184c31f3e97ef8c08fbf83c776f4eb5e21.tar.bz2 |
netfilter: nf_tables: fix missing byteorder conversion in policy
When fetching the policy attribute, the byteorder conversion was
missing, breaking the chain policy setting.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter')
-rw-r--r-- | net/netfilter/nf_tables_api.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/netfilter/nf_tables_api.c b/net/netfilter/nf_tables_api.c index 36add31e08e7..117bbaaddde6 100644 --- a/net/netfilter/nf_tables_api.c +++ b/net/netfilter/nf_tables_api.c @@ -859,7 +859,7 @@ static int nf_tables_newchain(struct sock *nlsk, struct sk_buff *skb, nla[NFTA_CHAIN_HOOK] == NULL) return -EOPNOTSUPP; - policy = nla_get_be32(nla[NFTA_CHAIN_POLICY]); + policy = ntohl(nla_get_be32(nla[NFTA_CHAIN_POLICY])); switch (policy) { case NF_DROP: case NF_ACCEPT: |