diff --git a/target/linux/generic/patches-2.6.39/612-netfilter_match_reduce_memory_access.patch b/target/linux/generic/patches-2.6.39/612-netfilter_match_reduce_memory_access.patch
index a36a1728d1..7c50ad7478 100644
--- a/target/linux/generic/patches-2.6.39/612-netfilter_match_reduce_memory_access.patch
+++ b/target/linux/generic/patches-2.6.39/612-netfilter_match_reduce_memory_access.patch
@@ -9,7 +9,7 @@
 +		  (ip->saddr&ipinfo->smsk.s_addr) != ipinfo->src.s_addr,
  		  IPT_INV_SRCIP) ||
 -	    FWINV((ip->daddr&ipinfo->dmsk.s_addr) != ipinfo->dst.s_addr,
-+	    FWINV(ipinfo->smsk.s_addr &&
++	    FWINV(ipinfo->dmsk.s_addr &&
 +		  (ip->daddr&ipinfo->dmsk.s_addr) != ipinfo->dst.s_addr,
  		  IPT_INV_DSTIP)) {
  		dprintf("Source or dest mismatch.\n");
diff --git a/target/linux/generic/patches-3.0/612-netfilter_match_reduce_memory_access.patch b/target/linux/generic/patches-3.0/612-netfilter_match_reduce_memory_access.patch
index 817b37efd1..f506165e1d 100644
--- a/target/linux/generic/patches-3.0/612-netfilter_match_reduce_memory_access.patch
+++ b/target/linux/generic/patches-3.0/612-netfilter_match_reduce_memory_access.patch
@@ -9,7 +9,7 @@
 +		  (ip->saddr&ipinfo->smsk.s_addr) != ipinfo->src.s_addr,
  		  IPT_INV_SRCIP) ||
 -	    FWINV((ip->daddr&ipinfo->dmsk.s_addr) != ipinfo->dst.s_addr,
-+	    FWINV(ipinfo->smsk.s_addr &&
++	    FWINV(ipinfo->dmsk.s_addr &&
 +		  (ip->daddr&ipinfo->dmsk.s_addr) != ipinfo->dst.s_addr,
  		  IPT_INV_DSTIP)) {
  		dprintf("Source or dest mismatch.\n");