tree e3e691dce66154af530ef17e8c5c6584c088dbfd
parent f7d8095579241dc357cf127e8f0e3fe543de5318
author Phil Sutter <phil@nwl.cc> 1589455881 +0200
committer Greg Kroah-Hartman <gregkh@linuxfoundation.org> 1591165187 +0200

netfilter: ipset: Fix subcounter update skip

commit a164b95ad6055c50612795882f35e0efda1f1390 upstream.

If IPSET_FLAG_SKIP_SUBCOUNTER_UPDATE is set, user requested to not
update counters in sub sets. Therefore IPSET_FLAG_SKIP_COUNTER_UPDATE
must be set, not unset.

Fixes: 6e01781d1c80e ("netfilter: ipset: set match: add support to match the counters")
Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>