summaryrefslogtreecommitdiffstats
path: root/iptables/nft.c
diff options
context:
space:
mode:
authorGiuseppe Longo <giuseppelng@gmail.com>2013-06-19 13:14:23 +0200
committerPablo Neira Ayuso <pablo@netfilter.org>2013-12-30 23:50:34 +0100
commit36ca9bdb288f7ba528307b7695ab94f7fa8e9a2d (patch)
tree397807f20e3187c04bc687bd3ee8aecaa7b35196 /iptables/nft.c
parentb6d90619891e9a2f804af6af9860da8f95878abf (diff)
nft: break loop after found matching chain
This patch breaks looping in nft_chain_user_del, nft_chain_zero_counters and nft_rule_flush after the chain is found. Signed-off-by: Giuseppe Longo <giuseppelng@gmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'iptables/nft.c')
-rw-r--r--iptables/nft.c7
1 files changed, 7 insertions, 0 deletions
diff --git a/iptables/nft.c b/iptables/nft.c
index 3aac420c..8be960fb 100644
--- a/iptables/nft.c
+++ b/iptables/nft.c
@@ -1271,6 +1271,8 @@ int nft_rule_flush(struct nft_handle *h, const char *chain, const char *table)
__nft_rule_flush(h, table_name, chain_name);
+ if (chain != NULL)
+ break;
next:
c = nft_chain_list_iter_next(iter);
}
@@ -1381,6 +1383,9 @@ int nft_chain_user_del(struct nft_handle *h, const char *chain, const char *tabl
break;
deleted_ctr++;
+
+ if (chain != NULL)
+ break;
next:
c = nft_chain_list_iter_next(iter);
}
@@ -2841,6 +2846,8 @@ int nft_chain_zero_counters(struct nft_handle *h, const char *chain,
if (ret < 0)
perror("mnl_talk:nft_chain_zero_counters");
+ if (chain != NULL)
+ break;
next:
c = nft_chain_list_iter_next(iter);
}