Unverified Commit 37a3e8b9 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!2092 netfilter: nf_tables: skip bound chain on rule flush 

Merge Pull Request from: @ci-robot 
 
PR sync from: Zhengchao Shao <shaozhengchao@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/74UIFZWNDMBSM4OQZQ43LRJB2AOY7I7K/ 
 
https://gitee.com/src-openeuler/kernel/issues/I7YIXI 
 
Link:https://gitee.com/openeuler/kernel/pulls/2092

 

Reviewed-by: default avatarYue Haibing <yuehaibing@huawei.com>
Signed-off-by: default avatarJialin Zhang <zhangjialin11@huawei.com>
parents 568e5d6f f422c0ce

net/netfilter/nf_tables_api.c

+2 −0
Original line number Diff line number Diff line
@@ -3516,6 +3516,8 @@ static int nf_tables_delrule(struct net *net, struct sock *nlsk, 
		list_for_each_entry(chain, &table->chains, list) {

			if (!nft_is_active_next(net, chain))

				continue;

			if (nft_chain_is_bound(chain))

				continue;



			ctx.chain = chain;

			err = nft_delrule_by_chain(&ctx);