ematch: Fix matching of inverted containers.

Negated expressions and sub-expressions need to have their flags checked for TCF_EM_INVERT and their result negated accordingly. Signed-off-by: Ignacy Gawędzki <[email protected]> Signed-off-by: David S. Miller <[email protected]>
josf · Sep 29, 2014 · 17c9c82 · 17c9c82
1 parent 73d3fe6
commit 17c9c82
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/net/sched/ematch.c b/net/sched/ematch.c
@@ -526,9 +526,11 @@ int __tcf_em_tree_match(struct sk_buff *skb, struct tcf_ematch_tree *tree,
 		match_idx = stack[--stackp];
 		cur_match = tcf_em_get_match(tree, match_idx);
 
-		if (tcf_em_early_end(cur_match, res))
+		if (tcf_em_early_end(cur_match, res)) {
+			if (tcf_em_is_inverted(cur_match))
+				res = !res;
 			goto pop_stack;
-		else {
+		} else {
 			match_idx++;
 			goto proceed;
 		}