From: Jan Engelhardt <jengelh@computergmbh.de>
Date: Fri, 30 Nov 2007 13:01:50 +0000 (+1100)
Subject: [NETFILTER]: fix forgotten module release in xt_CONNMARK and xt_CONNSECMARK
X-Git-Tag: v2.6.24-rc4~8^2~3
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=67b4af297033f5f65999885542f95ba7b562848a;p=pandora-kernel.git

[NETFILTER]: fix forgotten module release in xt_CONNMARK and xt_CONNSECMARK

Fix forgotten module release in xt_CONNMARK and xt_CONNSECMARK

When xt_CONNMARK is used outside the mangle table and the user specified
"--restore-mark", the connmark_tg_check() function will (correctly)
error out, but (incorrectly) forgets to release the L3 conntrack module.
Same for xt_CONNSECMARK.

Fix is to move the call to acquire the L3 module after the basic
constraint checks.

Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
---

Reading git-diff-tree failed