Skip to content

Commit 78470d9

Browse files
Florian Westphalummakynes
authored andcommitted
netfilter: nft_meta: fix iifgroup matching
iifgroup matching erroneously checks the output interface. Fixes: 8724e81 ("netfilter: nft_meta: move all interface related keys to helper") Reported-by: Demi M. Obenour <[email protected]> Signed-off-by: Florian Westphal <[email protected]> Signed-off-by: Pablo Neira Ayuso <[email protected]>
1 parent ffe8923 commit 78470d9

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

net/netfilter/nft_meta.c

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -253,7 +253,7 @@ static bool nft_meta_get_eval_ifname(enum nft_meta_keys key, u32 *dest,
253253
return false;
254254
break;
255255
case NFT_META_IIFGROUP:
256-
if (!nft_meta_store_ifgroup(dest, nft_out(pkt)))
256+
if (!nft_meta_store_ifgroup(dest, nft_in(pkt)))
257257
return false;
258258
break;
259259
case NFT_META_OIFGROUP:

0 commit comments

Comments
 (0)