Fixes: 301c9cd2848d ("netfilter: nf_tables: permit second nat hook if colliding hook is going away") Signed-off-by: Fengguang Wu <fengguang.wu@xxxxxxxxx> --- nf_tables_api.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/net/netfilter/nf_tables_api.c b/net/netfilter/nf_tables_api.c index 6923922..d59cc21 100644 --- a/net/netfilter/nf_tables_api.c +++ b/net/netfilter/nf_tables_api.c @@ -89,8 +89,8 @@ static void nft_trans_destroy(struct nft_trans *trans) * Either transaction is aborted (new/colliding hook is removed), or * transaction is committed (old hook is removed). */ -bool nf_tables_allow_nat_conflict(const struct net *net, - const struct nf_hook_ops *ops) +static bool nf_tables_allow_nat_conflict(const struct net *net, + const struct nf_hook_ops *ops) { const struct nft_trans *trans; bool ret = false; -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html