Re: [PATCH nf-next 3/3] netfilter: nf_tables: fix wrong destroy anonymous sets if binding fails

On Sat, Jun 11, 2016 at 12:20:28PM +0800, Liping Zhang wrote: > From: Liping Zhang > > When we add a nft rule like follows: > # nft add rule filter test tcp dport vmap {1: jump test} > -ELOOP error will be returned, and the anonymous set will be > destroyed. > >

[PATCH nf-next 3/3] netfilter: nf_tables: fix wrong destroy anonymous sets if binding fails

From: Liping Zhang When we add a nft rule like follows: # nft add rule filter test tcp dport vmap {1: jump test} -ELOOP error will be returned, and the anonymous set will be destroyed. But after that, nf_tables_abort will also try to remove the element and destroy