[NETFILTER]: fix ctnetlink 'create_expect' parsing

There was a stupid copy+paste mistake where we parse the MASK nfattr into
the "tuple" variable instead of the "mask" variable.  This patch fixes it.
Thanks to Pablo Neira.

Signed-off-by: Harald Welte <laforge@netfilter.org>
Signed-off-by: David S. Miller <davem@davemloft.net>

diff --git a/net/ipv4/netfilter/ip_conntrack_netlink.c b/net/ipv4/netfilter/ip_conntrack_netlink.c
index 0ab2d7df6bc4ba3dd48a2b6ec2d632524b44f0ab..23f18f6a5535a9321c320c5b6a3df553f2ba74a1 100644 (file)
--- a/net/ipv4/netfilter/ip_conntrack_netlink.c
+++ b/net/ipv4/netfilter/ip_conntrack_netlink.c
@@ -1388,7 +1388,7 @@ ctnetlink_create_expect(struct nfattr *cda[])
        err = ctnetlink_parse_tuple(cda, &tuple, CTA_EXPECT_TUPLE);
        if (err < 0)
                return err;
-       err = ctnetlink_parse_tuple(cda, &tuple, CTA_EXPECT_MASK);
+       err = ctnetlink_parse_tuple(cda, &mask, CTA_EXPECT_MASK);
        if (err < 0)
                return err;