]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
netfilter: nf_tables: do not leave chain stats enabled on error
authorPablo Neira Ayuso <pablo@netfilter.org>
Sun, 21 Aug 2022 10:41:33 +0000 (12:41 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 31 Aug 2022 15:18:07 +0000 (17:18 +0200)
commit98a621ef45e3605c7487f7fa6fec7df94697d6a2
treeea96f7e6a1966012f069c3a7749335b2506409a0
parent09cd8ecf3107efc4dcfb124a3079635c33965002
netfilter: nf_tables: do not leave chain stats enabled on error

[ Upstream commit 43eb8949cfdffa764b92bc6c54b87cbe5b0003fe ]

Error might occur later in the nf_tables_addchain() codepath, enable
static key only after transaction has been created.

Fixes: 9f08ea848117 ("netfilter: nf_tables: keep chain counters away from hot path")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nf_tables_api.c