Commit ce898ecb authored by Patrick McHardy's avatar Patrick McHardy Committed by Pablo Neira Ayuso

netfilter: nft_reject_inet: fix unintended fall-through in switch-statatement

For IPv4 packets, we call both IPv4 and IPv6 reject.
Reported-by: default avatarDave Jones <davej@redhat.com>
Signed-off-by: default avatarPatrick McHardy <kaber@trash.net>
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent 20e7c4e8
...@@ -21,9 +21,9 @@ static void nft_reject_inet_eval(const struct nft_expr *expr, ...@@ -21,9 +21,9 @@ static void nft_reject_inet_eval(const struct nft_expr *expr,
{ {
switch (pkt->ops->pf) { switch (pkt->ops->pf) {
case NFPROTO_IPV4: case NFPROTO_IPV4:
nft_reject_ipv4_eval(expr, data, pkt); return nft_reject_ipv4_eval(expr, data, pkt);
case NFPROTO_IPV6: case NFPROTO_IPV6:
nft_reject_ipv6_eval(expr, data, pkt); return nft_reject_ipv6_eval(expr, data, pkt);
} }
} }
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment