netfilter: ipset: Don't call ip_nest_end needlessly in the error path

Suggested-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>

3 files changed, 3 insertions, 3 deletions

diff --git a/net/netfilter/ipset/ip_set_bitmap_gen.h b/net/netfilter/ipset/ip_set_bitmap_gen.h
index 25243379b887..f6af97cf8d3e 100644
--- a/net/netfilter/ipset/ip_set_bitmap_gen.h
+++ b/net/netfilter/ipset/ip_set_bitmap_gen.h
@@ -228,11 +228,11 @@ mtype_list(const struct ip_set *set,
 
 nla_put_failure:
         nla_nest_cancel(skb, nested);
-        ipset_nest_end(skb, adt);
         if (unlikely(id == first)) {
                 cb->args[2] = 0;
                 return -EMSGSIZE;
         }
+        ipset_nest_end(skb, adt);
         return 0;
 }
 
diff --git a/net/netfilter/ipset/ip_set_hash_gen.h b/net/netfilter/ipset/ip_set_hash_gen.h
index 707bc520d629..7ff20ecbe185 100644
--- a/net/netfilter/ipset/ip_set_hash_gen.h
+++ b/net/netfilter/ipset/ip_set_hash_gen.h
@@ -909,13 +909,13 @@ mtype_list(const struct ip_set *set,
 
 nla_put_failure:
         nlmsg_trim(skb, incomplete);
-        ipset_nest_end(skb, atd);
         if (unlikely(first == cb->args[2])) {
                 pr_warning("Can't list set %s: one bucket does not fit into "
                            "a message. Please report it!\n", set->name);
                 cb->args[2] = 0;
                 return -EMSGSIZE;
         }
+        ipset_nest_end(skb, atd);
         return 0;
 }
 
diff --git a/net/netfilter/ipset/ip_set_list_set.c b/net/netfilter/ipset/ip_set_list_set.c
index 979b8c90e422..68299ee15847 100644
--- a/net/netfilter/ipset/ip_set_list_set.c
+++ b/net/netfilter/ipset/ip_set_list_set.c
@@ -550,11 +550,11 @@ finish:
 
 nla_put_failure:
         nla_nest_cancel(skb, nested);
-        ipset_nest_end(skb, atd);
         if (unlikely(i == first)) {
                 cb->args[2] = 0;
                 return -EMSGSIZE;
         }
+        ipset_nest_end(skb, atd);
         return 0;
 }