nft_ct exposes this bit to userspace. This used to be #define NF_CT_STATE_UNTRACKED_BIT (1 << (IP_CT_NUMBER + 1)) (IP_CT_NUMBER is 5, so this was 0x40) .. but this got changed to 8 (0x100) when the untracked object got removed. Replace this with a literal 6 to prevent further incompatible changes in case IP_CT_NUMBER ever increases.
Showing the changes to include/uapi/linux (1 of 1 file). Show all
Unified · Split
| @@ -36,7 +36,7 @@ enum ip_conntrack_info { · 35 unmodified lines | ||
| 36 | 36 | |
| 37 | 37 | #define NF_CT_STATE_INVALID_BIT (1 << 0) |
| 38 | 38 | #define NF_CT_STATE_BIT(ctinfo) (1 << ((ctinfo) % IP_CT_IS_REPLY + 1)) |
| 39 | −#define NF_CT_STATE_UNTRACKED_BIT (1 << (IP_CT_UNTRACKED + 1)) | |
| 39 | +#define NF_CT_STATE_UNTRACKED_BIT (1 << 6) | |
| 40 | 40 | |
| 41 | 41 | /* Bitset representing status of connection. */ |
| 42 | 42 | enum ip_conntrack_status { |