Skip to content

Commit

Permalink
netfilter: xt_connlimit: use hotdrop jump mark
Browse files Browse the repository at this point in the history
Signed-off-by: Richard Weinberger <richard@nod.at>
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
  • Loading branch information
Richard Weinberger authored and Jan Engelhardt committed Jan 18, 2011
1 parent ae9d67a commit 1cc34c3
Showing 1 changed file with 2 additions and 4 deletions.
6 changes: 2 additions & 4 deletions net/netfilter/xt_connlimit.c
Original file line number Diff line number Diff line change
Expand Up @@ -204,11 +204,9 @@ connlimit_mt(const struct sk_buff *skb, struct xt_action_param *par)
&info->mask, par->family);
spin_unlock_bh(&info->data->lock);

if (connections < 0) {
if (connections < 0)
/* kmalloc failed, drop it entirely */
par->hotdrop = true;
return false;
}
goto hotdrop;

return (connections > info->limit) ^ info->inverse;

Expand Down

0 comments on commit 1cc34c3

Please sign in to comment.