commit 36ca9bdb288f7ba528307b7695ab94f7fa8e9a2d
author Giuseppe Longo <giuseppelng@gmail.com> Wed Jun 19 13:14:23 2013 +0200
committer Pablo Neira Ayuso <pablo@netfilter.org> Mon Dec 30 23:50:34 2013 +0100
tree 397807f20e3187c04bc687bd3ee8aecaa7b35196
parent b6d90619891e9a2f804af6af9860da8f95878abf

nft: break loop after found matching chain

This patch breaks looping in nft_chain_user_del, nft_chain_zero_counters
and nft_rule_flush after the chain is found.

Signed-off-by: Giuseppe Longo <giuseppelng@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

iptables/nft.c

diff --git a/iptables/nft.c b/iptables/nft.c
index 3aac420..8be960f 100644
--- a/iptables/nft.c
+++ b/iptables/nft.c
@@ -1271,6 +1271,8 @@
 
 		__nft_rule_flush(h, table_name, chain_name);
 
+		if (chain != NULL)
+			break;
 next:
 		c = nft_chain_list_iter_next(iter);
 	}
@@ -1381,6 +1383,9 @@
 			break;
 
 		deleted_ctr++;
+
+		if (chain != NULL)
+			break;
 next:
 		c = nft_chain_list_iter_next(iter);
 	}
@@ -2841,6 +2846,8 @@
 		if (ret < 0)
 			perror("mnl_talk:nft_chain_zero_counters");
 
+		if (chain != NULL)
+			break;
 next:
 		c = nft_chain_list_iter_next(iter);
 	}