netfilter: connlimit: improve packet-to-closed-connection logic
authorFlorian Westphal <fw@strlen.de>
Fri, 7 Mar 2014 13:37:10 +0000 (14:37 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 12 Mar 2014 12:55:01 +0000 (13:55 +0100)
commitd9ec4f1ee280e5f8732e3c40ca672419b2532600
treea751b086f8c4e6acdb8d2e220ba76d351930ad79
parent15cfd52895751e8f36b48b8ad33f1d68b59611e2
netfilter: connlimit: improve packet-to-closed-connection logic

Instead of freeing the entry from our list and then adding
it back again in the 'packet to closing connection' case just keep the
matching entry around.  Also drop the found_ct != NULL test as
nf_ct_tuplehash_to_ctrack is just container_of().

Reviewed-by: Jesper Dangaard Brouer <brouer@redhat.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/xt_connlimit.c