Unverified Commit c61a6ef7 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!2126 netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR 

Merge Pull Request from: @ci-robot 
 
PR sync from: Lu Wei <luwei32@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/NHFZQYCCP5A2ID3IO4AXCAONOTFCMXV6/ 
 
https://gitee.com/src-openeuler/kernel/issues/I7YIXO 
 
Link:https://gitee.com/openeuler/kernel/pulls/2126

 

Reviewed-by: default avatarYue Haibing <yuehaibing@huawei.com>
Signed-off-by: default avatarJialin Zhang <zhangjialin11@huawei.com>
parents 0107d9c6 12d448d8

net/netfilter/nft_immediate.c

+18 −9
Original line number Diff line number Diff line
@@ -125,15 +125,27 @@ static void nft_immediate_activate(const struct nft_ctx *ctx, 
	return nft_data_hold(&priv->data, nft_dreg_to_type(priv->dreg));

}



static void nft_immediate_chain_deactivate(const struct nft_ctx *ctx,

					   struct nft_chain *chain,

					   enum nft_trans_phase phase)

{

	struct nft_ctx chain_ctx;

	struct nft_rule *rule;



	chain_ctx = *ctx;

	chain_ctx.chain = chain;



	list_for_each_entry(rule, &chain->rules, list)

		nft_rule_expr_deactivate(&chain_ctx, rule, phase);

}



static void nft_immediate_deactivate(const struct nft_ctx *ctx,

				     const struct nft_expr *expr,

				     enum nft_trans_phase phase)

{

	const struct nft_immediate_expr *priv = nft_expr_priv(expr);

	const struct nft_data *data = &priv->data;

	struct nft_ctx chain_ctx;

	struct nft_chain *chain;

	struct nft_rule *rule;



	if (priv->dreg == NFT_REG_VERDICT) {

		switch (data->verdict.code) {
@@ -143,20 +155,17 @@ static void nft_immediate_deactivate(const struct nft_ctx *ctx, 
			if (!nft_chain_binding(chain))

				break;



			chain_ctx = *ctx;

			chain_ctx.chain = chain;



			list_for_each_entry(rule, &chain->rules, list)

				nft_rule_expr_deactivate(&chain_ctx, rule, phase);



			switch (phase) {

			case NFT_TRANS_PREPARE_ERROR:

				nf_tables_unbind_chain(ctx, chain);

				fallthrough;

				nft_deactivate_next(ctx->net, chain);

				break;

			case NFT_TRANS_PREPARE:

				nft_immediate_chain_deactivate(ctx, chain, phase);

				nft_deactivate_next(ctx->net, chain);

				break;

			default:

				nft_immediate_chain_deactivate(ctx, chain, phase);

				nft_chain_del(chain);

				chain->bound = false;

				chain->table->use--;