netfilter: nf_tables: fix flush after rule deletion in the same batch
authorPablo Neira Ayuso <pablo@netfilter.org>
Fri, 15 Feb 2019 11:50:24 +0000 (12:50 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 27 Feb 2019 09:07:03 +0000 (10:07 +0100)
commitdeba234596ead92e6d65de42fa5345e3e02d73dc
tree87bc71f1d3ede60ef2124cd1d51e90aee53bd399
parent0b6633d1f19b7dc99066b96731daf451dbe9aaf7
netfilter: nf_tables: fix flush after rule deletion in the same batch

commit 23b7ca4f745f21c2b9cfcb67fdd33733b3ae7e66 upstream.

Flush after rule deletion bogusly hits -ENOENT. Skip rules that have
been already from nft_delrule_by_chain() which is always called from the
flush path.

Fixes: cf9dc09d0949 ("netfilter: nf_tables: fix missing rules flushing per table")
Reported-by: Phil Sutter <phil@nwl.cc>
Acked-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/netfilter/nf_tables_api.c