On Sat, Jun 11, 2016 at 12:20:28PM +0800, Liping Zhang wrote: > From: Liping Zhang <liping.zhang@xxxxxxxxxxxxxx> > > When we add a nft rule like follows: > # nft add rule filter test tcp dport vmap {1: jump test} > -ELOOP error will be returned, and the anonymous set will be > destroyed. > > But after that, nf_tables_abort will also try to remove the > element and destroy the set, which was already destroyed and > freed. > > If we add a nft wrong rule, nft_tables_abort will do the cleanup > work rightly, so nf_tables_set_destroy call here is redundant and > wrong, remove it. Also applied, thanks. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html