netfilter: xt_connlimit: use hotdrop jump mark
authorRichard Weinberger <richard@nod.at>
Tue, 18 Jan 2011 00:36:57 +0000 (01:36 +0100)
committerJan Engelhardt <jengelh@medozas.de>
Tue, 18 Jan 2011 05:50:41 +0000 (06:50 +0100)
Signed-off-by: Richard Weinberger <richard@nod.at>
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
net/netfilter/xt_connlimit.c

index 5c5b6b921b845b2fe1ba438ef9c13a2161e5b0ea..452bc16af56c1c767511a7d4910e99339b5a2a58 100644 (file)
@@ -204,11 +204,9 @@ connlimit_mt(const struct sk_buff *skb, struct xt_action_param *par)
                                 &info->mask, par->family);
        spin_unlock_bh(&info->data->lock);
 
-       if (connections < 0) {
+       if (connections < 0)
                /* kmalloc failed, drop it entirely */
-               par->hotdrop = true;
-               return false;
-       }
+               goto hotdrop;
 
        return (connections > info->limit) ^ info->inverse;