| Message ID | 3cf1e9ee-0432-0062-5c4f-c287a00de3df@virtuozzo.com |
|---|---|
| State | Changes Requested |
| Delegated to: | Pablo Neira |
| Headers | show |
| Series | None | expand |
diff --git a/net/netfilter/x_tables.c b/net/netfilter/x_tables.c index d8571f4..7e74b37 100644 --- a/net/netfilter/x_tables.c +++ b/net/netfilter/x_tables.c @@ -1714,8 +1714,18 @@ static int __net_init xt_net_init(struct net *net) return 0; } +static void __net_exit xt_net_exit(struct net *net) +{ + int i; + + for (i = 0; i < NFPROTO_NUMPROTO; i++) + WARN(!list_empty(&net->xt.tables[i]), + "net %p exit: xt tables list is not empty\n", net); +} + static struct pernet_operations xt_net_ops = { .init = xt_net_init, + .exit = xt_net_exit, }; static int __init xt_init(void)
Be sure that xt.tables array initialized in net_init hook was return to initial state. Signed-off-by: Vasily Averin <vvs@virtuozzo.com> --- net/netfilter/x_tables.c | 10 ++++++++++ 1 file changed, 10 insertions(+)