netfilter: nf_tables: don't update chain with unset counters
authorPablo Neira Ayuso <pablo@netfilter.org>
Tue, 5 Aug 2014 15:25:59 +0000 (17:25 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 8 Aug 2014 13:38:50 +0000 (15:38 +0200)
commitb88825de8545ad252c31543fef13cadf4de7a2bc
treeefda3574e66870d16818e423e4587c5f784bcfaf
parenta3716e70e1def691ad39e0f908fea0870ce010d9
netfilter: nf_tables: don't update chain with unset counters

Fix possible replacement of the per-cpu chain counters by null
pointer when updating an existing chain in the commit path.

Reported-by: Matteo Croce <technoboy85@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_tables_api.c