| commit | 59900e0a019e7c2bdb7809a03ed5742d311b15b3 | [log] [tgz] |
|---|---|---|
| author | Pablo Neira Ayuso <pablo@netfilter.org> | Wed Mar 04 17:55:27 2015 +0100 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Wed Mar 04 18:46:08 2015 +0100 |
| tree | d128e560d9936517baaf94261444682fae727097 | |
| parent | 86f1ec32318159a24de349f0a38e79b9d2b3131a [diff] |
netfilter: nf_tables: fix error handling of rule replacement In general, if a transaction object is added to the list successfully, we can rely on the abort path to undo what we've done. This allows us to simplify the error handling of the rule replacement path in nf_tables_newrule(). This implicitly fixes an unnecessary removal of the old rule, which needs to be left in place if we fail to replace. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>