Commit 2b4e5fb4 authored by Pablo Neira Ayuso's avatar Pablo Neira Ayuso

netfilter: nft_synproxy: unregister hooks on init error path

Disable the IPv4 hooks if the IPv6 hooks fail to be registered.

Fixes: ad49d86e ("netfilter: nf_tables: Add synproxy support")
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent 2e71ec1a
......@@ -191,8 +191,10 @@ static int nft_synproxy_do_init(const struct nft_ctx *ctx,
if (err)
goto nf_ct_failure;
err = nf_synproxy_ipv6_init(snet, ctx->net);
if (err)
if (err) {
nf_synproxy_ipv4_fini(snet, ctx->net);
goto nf_ct_failure;
}
break;
}
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment