commit d01b2c28c8101f0d24e1db3f146fd845c2a634e8
author Giuseppe Longo <giuseppelng@gmail.com> Sat Jun 08 02:24:35 2013 +0000
committer Pablo Neira Ayuso <pablo@netfilter.org> Mon Dec 30 23:50:32 2013 +0100
tree d20be3eb9593ec88d7d2a8f76fcdffff920e172f
parent d801b9f3b8161752ea2358a0bfb614603d28a8e5

nft: fix leak of rule and chain iterators

This patch fixes the leak of chain and rule iterators.

Signed-off-by: Giuseppe Longo <giuseppelng@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

iptables/nft.c

diff --git a/iptables/nft.c b/iptables/nft.c
index 7dad246..6a4898d 100644
--- a/iptables/nft.c
+++ b/iptables/nft.c
@@ -1118,6 +1118,7 @@
 		c = nft_chain_list_iter_next(iter);
 	}
 
+	nft_chain_list_iter_destroy(iter);
 	nft_chain_list_free(list);
 
 	return 1;
@@ -1206,6 +1207,7 @@
 		r = nft_rule_list_iter_next(iter);
 	}
 
+	nft_rule_list_iter_destroy(iter);
 	nft_rule_list_free(list);
 
 	/* the core expects 1 for success and 0 for error */
@@ -1283,6 +1285,7 @@
 		c = nft_chain_list_iter_next(iter);
 	}
 
+	nft_chain_list_iter_destroy(iter);
 err:
 	nft_chain_list_free(list);
 
@@ -1396,6 +1399,7 @@
 		c = nft_chain_list_iter_next(iter);
 	}
 
+	nft_chain_list_iter_destroy(iter);
 err:
 	nft_chain_list_free(list);