Florian Westphal e15e502710 netfilter: xt_mangle: only check verdict part of return value
These checks assume that the caller only returns NF_DROP without
any errno embedded in the upper bits.

This is fine right now, but followup patches will start to propagate
such errors to allow kfree_skb_drop_reason() in the called functions,
those would then indicate 'errno << 8 | NF_STOLEN'.

To not break things we have to mask those parts out.

Signed-off-by: Florian Westphal <fw@strlen.de>
2023-10-18 10:26:43 +02:00
..
2023-05-31 13:06:57 +02:00
2021-05-17 15:29:35 -07:00
2023-03-31 21:37:06 -07:00
2023-10-01 19:39:18 +01:00
2023-10-01 19:39:18 +01:00
2023-04-13 16:43:38 -07:00
2023-10-16 21:05:33 -07:00
2023-01-26 10:52:18 +01:00
2021-05-17 15:29:35 -07:00
2022-09-20 10:21:49 -07:00
2023-10-16 21:05:33 -07:00
2022-12-20 03:13:45 +01:00
2023-10-10 10:02:59 +02:00
2021-05-17 15:29:35 -07:00
2022-11-16 09:43:35 +00:00
2023-10-16 21:05:33 -07:00
2023-09-14 16:16:36 +02:00
2023-08-29 17:39:15 -07:00