netfilter: nf_conntrack: fix count leak in error path of __nf_conntrack_alloc
authorPablo Neira Ayuso <pablo@netfilter.org>
Tue, 3 Apr 2012 14:45:54 +0000 (16:45 +0200)
committerDavid S. Miller <davem@davemloft.net>
Tue, 3 Apr 2012 23:20:30 +0000 (19:20 -0400)
commitd96fc659aeb27686cef42d305cfd0c9702f8841c
treee021455bc7c25a1dfc80360b05caf5bc55dc68ae
parentee14186f8d2338227888f3c00a06caf31f94de38
netfilter: nf_conntrack: fix count leak in error path of __nf_conntrack_alloc

We have to decrement the conntrack counter if we fail to access the
zone extension.

Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/netfilter/nf_conntrack_core.c