iptables: A file descriptor cannot be a nagative integer

When a socket() has failed and a negative file descriptor has been set,
close() cannot accept a negative number as a parameter.

diff --git a/src/iptables.c b/src/iptables.c
index 147d604..16b665a 100644 (file)
--- a/src/iptables.c
+++ b/src/iptables.c
@@ -1207,7 +1207,8 @@ static void table_cleanup(struct connman_iptables *table)
        if (table == NULL)
                return;
 
-       close(table->ipt_sock);
+       if (table->ipt_sock >= 0)
+               close(table->ipt_sock);
 
        for (list = table->entries; list; list = list->next) {
                entry = list->data;