From: Patrick McHardy <kaber@trash.net>
Date: Thu, 9 Jan 2014 18:42:32 +0000 (+0000)
Subject: netfilter: nf_tables: restore chain change atomicity
X-Git-Tag: v3.14-rc1~94^2~245^2~11
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4401a862009bca28f02dcea4241191c27328816c;p=pandora-kernel.git

netfilter: nf_tables: restore chain change atomicity

Chain counter validation is performed after the chain policy has
potentially been changed. Move counter validation/setting before
changing of the chain policy to fix this.

Additionally fix a memory leak if chain counter allocation fails
for new chains, remove an unnecessary free_percpu() and move
counter allocation for new chains

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
---

Reading git-diff-tree failed