tree d128e560d9936517baaf94261444682fae727097
parent 86f1ec32318159a24de349f0a38e79b9d2b3131a
author Pablo Neira Ayuso <pablo@netfilter.org> 1425488127 +0100
committer Pablo Neira Ayuso <pablo@netfilter.org> 1425491168 +0100

netfilter: nf_tables: fix error handling of rule replacement

In general, if a transaction object is added to the list successfully,
we can rely on the abort path to undo what we've done. This allows us to
simplify the error handling of the rule replacement path in
nf_tables_newrule().

This implicitly fixes an unnecessary removal of the old rule, which
needs to be left in place if we fail to replace.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>