netfilter: conncount: use DEBUG_NET_WARN_ON_ONCE on reaching count limit
authorFernando Fernandez Mancera <fmancera@suse.de>
Mon, 1 Jun 2026 19:30:49 +0000 (21:30 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 27 Aug 2026 12:11:40 +0000 (14:11 +0200)
commit9b4ab1f3fed89d8c1e953dc069a0ddd705a73f09
tree6f7c54f0ebaea86a91a0b7218d4a9c22354371b4
parent1f0391aea883e99d402d0f77ba3530e4e879350d
netfilter: conncount: use DEBUG_NET_WARN_ON_ONCE on reaching count limit

Replace WARN_ON_ONCE with DEBUG_NET_WARN_ON_ONCE in __nf_conncount_add.
The function handles count limit breaches safely by returning
-EOVERFLOW, so a production backtrace is not needed. This prevents
unnecessary system panics when panic_on_warn=1 is enabled in production
systems.

Signed-off-by: Fernando Fernandez Mancera <fmancera@suse.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_conncount.c