netfilter: ipset: Fix subcounter update skip
authorPhil Sutter <phil@nwl.cc>
Thu, 14 May 2020 11:31:21 +0000 (13:31 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 3 Jun 2020 06:12:13 +0000 (08:12 +0200)
commit1b445533d0fa11c50446e6b1d71cb69af1a28bd4
tree8d2a337451d1e0e57b4e791ee9dd6490ec2583b5
parent03bfc73132470c2720d7968e49f99cb280020c85
netfilter: ipset: Fix subcounter update skip

commit a164b95ad6055c50612795882f35e0efda1f1390 upstream.

If IPSET_FLAG_SKIP_SUBCOUNTER_UPDATE is set, user requested to not
update counters in sub sets. Therefore IPSET_FLAG_SKIP_COUNTER_UPDATE
must be set, not unset.

Fixes: 6e01781d1c80e ("netfilter: ipset: set match: add support to match the counters")
Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/netfilter/ipset/ip_set_list_set.c