Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 73f85752 authored by Pablo Neira Ayuso's avatar Pablo Neira Ayuso Committed by Greg Kroah-Hartman
Browse files

netfilter: nft_synproxy: unregister hooks on init error path 



commit 2b4e5fb4d3776c391e40fb33673ba946dd96012d upstream.

Disable the IPv4 hooks if the IPv6 hooks fail to be registered.

Fixes: ad49d86e ("netfilter: nf_tables: Add synproxy support")
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
parent 5e8c5b21

net/netfilter/nft_synproxy.c

+3 −1
Original line number Diff line number Diff line
@@ -191,8 +191,10 @@ static int nft_synproxy_do_init(const struct nft_ctx *ctx, 
		if (err)

			goto nf_ct_failure;

		err = nf_synproxy_ipv6_init(snet, ctx->net);

		if (err)

		if (err) {

			nf_synproxy_ipv4_fini(snet, ctx->net);

			goto nf_ct_failure;

		}

		break;

	}