netfilter: ctnetlink: fix filtering with CTA_TUPLE_REPLY
authorFlorent Fourcot <florent.fourcot@wifirst.fr>
Wed, 3 Nov 2021 22:21:54 +0000 (23:21 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 1 Dec 2021 08:04:45 +0000 (09:04 +0100)
commit59a0088fde86739acaec38a9d7f3a094afea93d9
tree39997471c22f823c8a8aa6ba5610e0a3b1490c51
parent37c8d485cb72250e0bba48486a83c9c33993fb21
netfilter: ctnetlink: fix filtering with CTA_TUPLE_REPLY

[ Upstream commit ad81d4daf6a3f4769a346e635d5e1e967ca455d9 ]

filter->orig_flags was used for a reply context.

Fixes: cb8aa9a3affb ("netfilter: ctnetlink: add kernel side filtering for dump")
Signed-off-by: Florent Fourcot <florent.fourcot@wifirst.fr>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nf_conntrack_netlink.c