netfilter: ipset: Fix subcounter update skip
authorPhil Sutter <phil@nwl.cc>
Thu, 14 May 2020 11:31:21 +0000 (13:31 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 3 Jun 2020 06:21:34 +0000 (08:21 +0200)
commit17021d1b899d4ccc76a09e1867707b653e04a207
tree64faad041cc46296e2f4c5c9a8467eab9228b899
parent25f629a70680a2dc32fafc6bd38bbb2eb048e2bd
netfilter: ipset: Fix subcounter update skip

commit a164b95ad6055c50612795882f35e0efda1f1390 upstream.

If IPSET_FLAG_SKIP_SUBCOUNTER_UPDATE is set, user requested to not
update counters in sub sets. Therefore IPSET_FLAG_SKIP_COUNTER_UPDATE
must be set, not unset.

Fixes: 6e01781d1c80e ("netfilter: ipset: set match: add support to match the counters")
Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/netfilter/ipset/ip_set_list_set.c