diff options
Diffstat (limited to 'net/ipv6')
-rw-r--r-- | net/ipv6/netfilter/ip6_tables.c | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/net/ipv6/netfilter/ip6_tables.c b/net/ipv6/netfilter/ip6_tables.c index 4eec4b3988..99502c5da4 100644 --- a/net/ipv6/netfilter/ip6_tables.c +++ b/net/ipv6/netfilter/ip6_tables.c | |||
@@ -413,6 +413,7 @@ mark_source_chains(struct xt_table_info *newinfo, | |||
413 | unsigned int pos = newinfo->hook_entry[hook]; | 413 | unsigned int pos = newinfo->hook_entry[hook]; |
414 | struct ip6t_entry *e | 414 | struct ip6t_entry *e |
415 | = (struct ip6t_entry *)(entry0 + pos); | 415 | = (struct ip6t_entry *)(entry0 + pos); |
416 | int visited = e->comefrom & (1 << hook); | ||
416 | 417 | ||
417 | if (!(valid_hooks & (1 << hook))) | 418 | if (!(valid_hooks & (1 << hook))) |
418 | continue; | 419 | continue; |
@@ -433,11 +434,11 @@ mark_source_chains(struct xt_table_info *newinfo, | |||
433 | |= ((1 << hook) | (1 << NF_IP6_NUMHOOKS)); | 434 | |= ((1 << hook) | (1 << NF_IP6_NUMHOOKS)); |
434 | 435 | ||
435 | /* Unconditional return/END. */ | 436 | /* Unconditional return/END. */ |
436 | if (e->target_offset == sizeof(struct ip6t_entry) | 437 | if ((e->target_offset == sizeof(struct ip6t_entry) |
437 | && (strcmp(t->target.u.user.name, | 438 | && (strcmp(t->target.u.user.name, |
438 | IP6T_STANDARD_TARGET) == 0) | 439 | IP6T_STANDARD_TARGET) == 0) |
439 | && t->verdict < 0 | 440 | && t->verdict < 0 |
440 | && unconditional(&e->ipv6)) { | 441 | && unconditional(&e->ipv6)) || visited) { |
441 | unsigned int oldpos, size; | 442 | unsigned int oldpos, size; |
442 | 443 | ||
443 | if (t->verdict < -NF_MAX_VERDICT - 1) { | 444 | if (t->verdict < -NF_MAX_VERDICT - 1) { |