Florian Westphal 35c038b0a4 netfilter: nf_nat: mask out non-verdict bits when checking return value
Same as previous change: we need to mask out the non-verdict bits, as
upcoming patches may embed an errno value in NF_STOLEN verdicts too.

NF_DROP could already do this, but not all called functions do this.

Checks that only test ret vs NF_ACCEPT are fine, the 'errno parts'
are always 0 for those.

Signed-off-by: Florian Westphal <fw@strlen.de>
2023-10-18 10:26:43 +02:00
..
2023-10-01 19:09:54 +01:00
2023-05-31 13:06:57 +02:00
2023-08-29 17:39:15 -07:00
2023-03-16 17:34:40 -07:00
2023-06-24 15:41:46 -07:00
2023-10-01 19:09:54 +01:00
2023-06-28 16:43:10 -07:00
2023-10-01 19:09:54 +01:00
2023-10-11 10:39:01 +01:00