netfilter: conntrack: nf_conncount_init is failing with IPv6 disabled
authorEelco Chaudron <echaudro@redhat.com>
Tue, 1 Sep 2020 14:56:02 +0000 (16:56 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 8 Sep 2020 11:04:54 +0000 (13:04 +0200)
commit526e81b990e53e31ba40ba304a2285ffd098721f
treeabc09e4ca58cac67230edea19587383d9e78a8d4
parent6c0d95d1238d944fe54f0bbfc7ec017d78435daa
netfilter: conntrack: nf_conncount_init is failing with IPv6 disabled

The openvswitch module fails initialization when used in a kernel
without IPv6 enabled. nf_conncount_init() fails because the ct code
unconditionally tries to initialize the netns IPv6 related bit,
regardless of the build option. The change below ignores the IPv6
part if not enabled.

Note that the corresponding _put() function already has this IPv6
configuration check.

Fixes: 11efd5cb04a1 ("openvswitch: Support conntrack zone limit")
Signed-off-by: Eelco Chaudron <echaudro@redhat.com>
Reviewed-by: Simon Horman <simon.horman@netronome.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_conntrack_proto.c