[PATCH v3 15/21] nf_tables: exit_net cleanup check added
From: Vasily Averin <hidden>
Date: 2017-11-06 13:25:27
Also in:
netfilter-devel
Subsystem:
netfilter, networking [general], the rest · Maintainers:
Pablo Neira Ayuso, Florian Westphal, "David S. Miller", Eric Dumazet, Jakub Kicinski, Paolo Abeni, Linus Torvalds
Be sure that lists initialized in net_init hook were return to initial state. Signed-off-by: Vasily Averin <redacted> --- net/netfilter/nf_tables_api.c | 11 +++++++++++ 1 file changed, 11 insertions(+)
diff --git a/net/netfilter/nf_tables_api.c b/net/netfilter/nf_tables_api.c
index 64e1ee0..3b7f518 100644
--- a/net/netfilter/nf_tables_api.c
+++ b/net/netfilter/nf_tables_api.c@@ -5778,6 +5778,16 @@ static int __net_init nf_tables_init_net(struct net *net) return 0; } +static void __net_exit nf_tables_exit_net(struct net *net) +{ + WARN_ONCE(!list_empty(&net->nft.af_info), + "net %x %s: af_info list is not empty\n", + net->ns.inum, __func__); + WARN_ONCE(!list_empty(&net->nft.commit_list), + "net %x %s: commit_list is not empty\n", + net->ns.inum, __func__); +} + int __nft_release_basechain(struct nft_ctx *ctx) { struct nft_rule *rule, *nr;
@@ -5848,6 +5858,7 @@ static void __nft_release_afinfo(struct net *net, struct nft_af_info *afi) static struct pernet_operations nf_tables_net_ops = { .init = nf_tables_init_net, + .exit = nf_tables_exit_net, }; static int __init nf_tables_module_init(void)
--
2.7.4