fix deleting of time rules (SooYoun Cho) (Closes: #169)
diff --git a/extensions/libipt_time.c b/extensions/libipt_time.c
index 909ca81..69c3570 100644
--- a/extensions/libipt_time.c
+++ b/extensions/libipt_time.c
@@ -291,13 +291,15 @@
printf(" ");
}
+/* have to use offsetof() instead of IPT_ALIGN(), since kerneltime must not
+ * be compared when user deletes rule with '-D' */
static
struct iptables_match timestruct
= { NULL,
"time",
IPTABLES_VERSION,
IPT_ALIGN(sizeof(struct ipt_time_info)),
- IPT_ALIGN(sizeof(struct ipt_time_info)),
+ offsetof(struct ipt_time_info, kerneltime),
&help,
&init,
&parse,