iptables: Fix warning in CONNMARK

Signed-off-by Thomas Graf <[email protected]>

net/ipv4/netfilter/ipt_CONNMARK.c +1 -1

@@ -60,7 +60,7 @@
 		break;
 	    case IPT_CONNMARK_RESTORE:
 		nfmark = (*pskb)->nfmark;
-		diff = (ct->mark ^ nfmark & markinfo->mask);
+		diff = ((ct->mark ^ nfmark) & markinfo->mask);
 		if (diff != 0) {
 		    (*pskb)->nfmark = nfmark ^ diff;
 		    (*pskb)->nfcache |= NFC_ALTERED;