These always have to be freed because nft_chain_user_del() removes them
from the cache so they are not freed when the chain cache is flushed.

Signed-off-by: Phil Sutter <[email protected]>
---
 iptables/nft.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/iptables/nft.c b/iptables/nft.c
index f2d6ea137e48d..26df1287c5188 100644
--- a/iptables/nft.c
+++ b/iptables/nft.c
@@ -2447,8 +2447,8 @@ static void batch_obj_del(struct nft_handle *h, struct 
obj_update *o)
                break;
        case NFT_COMPAT_CHAIN_ADD:
        case NFT_COMPAT_CHAIN_USER_ADD:
-       case NFT_COMPAT_CHAIN_USER_DEL:
                break;
+       case NFT_COMPAT_CHAIN_USER_DEL:
        case NFT_COMPAT_CHAIN_USER_FLUSH:
        case NFT_COMPAT_CHAIN_UPDATE:
        case NFT_COMPAT_CHAIN_RENAME:
-- 
2.18.0

--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to