netfilter: nf_tables: fix flush after rule deletion in the same batch
authorPablo Neira Ayuso <pablo@netfilter.org>
Fri, 15 Feb 2019 11:50:24 +0000 (12:50 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 27 Feb 2019 09:09:02 +0000 (10:09 +0100)
commit1500d94e33d88383c69c27d6c9247174898a4078
treed100d34347d8d84b553a3979a68fba684707120b
parent6ecc7407187c5ce65fb156a96ef38c544fadf100
netfilter: nf_tables: fix flush after rule deletion in the same batch

commit 23b7ca4f745f21c2b9cfcb67fdd33733b3ae7e66 upstream.

Flush after rule deletion bogusly hits -ENOENT. Skip rules that have
been already from nft_delrule_by_chain() which is always called from the
flush path.

Fixes: cf9dc09d0949 ("netfilter: nf_tables: fix missing rules flushing per table")
Reported-by: Phil Sutter <phil@nwl.cc>
Acked-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/netfilter/nf_tables_api.c