From 3823507815beab56470a0de30447b1edcf0f5ab4 Mon Sep 17 00:00:00 2001 From: Richard Fuchs Date: Tue, 17 Oct 2023 15:11:26 -0400 Subject: [PATCH] MT#57371 fix rule deletion We need to reset the condition flag for each rule, otherwise we may end up deleting everything Change-Id: Ic7f827149d18cce9e7b5d8ae5f0145bd52bee12d --- daemon/nftables.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/daemon/nftables.c b/daemon/nftables.c index 055ea6285..e30a87644 100644 --- a/daemon/nftables.c +++ b/daemon/nftables.c @@ -124,6 +124,8 @@ static int nftables_do_rule(const struct nlmsghdr *nlh, void *data) { if (nftnl_rule_nlmsg_parse(nlh, r) < 0) return MNL_CB_OK; + memset(&callbacks->rule_scratch, 0, sizeof(callbacks->rule_scratch)); + if (nftnl_expr_foreach(r, callbacks->parse_expr, callbacks) < 0) return MNL_CB_OK;