'ip protocol ne 6' is not a dependency for nexthdr protocol, and must
not be stored as such.

Fixes: 0b858391781ba308 ("src: annotate follow up dependency just after killing 
another")
Signed-off-by: Florian Westphal <[email protected]>
---
 src/netlink_delinearize.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/netlink_delinearize.c b/src/netlink_delinearize.c
index a65a97da89fb..f0288cd49914 100644
--- a/src/netlink_delinearize.c
+++ b/src/netlink_delinearize.c
@@ -1332,7 +1332,7 @@ static void payload_match_expand(struct rule_pp_ctx *ctx,
                        payload_dependency_store(&ctx->pdctx, nstmt, base - 
stacked);
                } else {
                        payload_dependency_kill(&ctx->pdctx, nexpr->left);
-                       if (left->flags & EXPR_F_PROTOCOL)
+                       if (expr->op == OP_EQ && left->flags & EXPR_F_PROTOCOL)
                                payload_dependency_store(&ctx->pdctx, nstmt, 
base - stacked);
                }
        }
-- 
2.10.2

--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to