From: Pablo Neira Ayuso <pablo@netfilter.org>
Date: Thu, 10 Feb 2022 09:06:42 +0000 (+0100)
Subject: netfilter: nft_synproxy: unregister hooks on init error path
X-Git-Tag: v6.1-rc5~1985^2~38^2~2
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=2b4e5fb4d3776c391e40fb33673ba946dd96012d;p=platform%2Fkernel%2Flinux-starfive.git

netfilter: nft_synproxy: unregister hooks on init error path

Disable the IPv4 hooks if the IPv6 hooks fail to be registered.

Fixes: ad49d86e07a4 ("netfilter: nf_tables: Add synproxy support")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
---

diff --git a/net/netfilter/nft_synproxy.c b/net/netfilter/nft_synproxy.c
index a0109fa..1133e06 100644
--- a/net/netfilter/nft_synproxy.c
+++ b/net/netfilter/nft_synproxy.c
@@ -191,8 +191,10 @@ static int nft_synproxy_do_init(const struct nft_ctx *ctx,
 		if (err)
 			goto nf_ct_failure;
 		err = nf_synproxy_ipv6_init(snet, ctx->net);
-		if (err)
+		if (err) {
+			nf_synproxy_ipv4_fini(snet, ctx->net);
 			goto nf_ct_failure;
+		}
 		break;
 	}