commit df05ef874b284d833c2d9795a6350c6a373ab6c9
author Pablo Neira Ayuso <pablo@netfilter.org> Tue Dec 15 19:39:32 2015 +0100
committer Pablo Neira Ayuso <pablo@netfilter.org> Mon Dec 28 18:34:35 2015 +0100
tree ffd2f14eaaebec6551de4e8e2fc1f19d9cb1ccf0
parent 26a4d063b1357e3ad81b776eb89d4d82f101da2c

netfilter: nf_tables: release objects on netns destruction

We have to release the existing objects on netns removal otherwise we
leak them. Chains are unregistered in first place to make sure no
packets are walking on our rules and sets anymore.

The object release happens by when we unregister the family via
nft_release_afinfo() which is called from nft_unregister_afinfo() from
the corresponding __net_exit path in every family.

Reported-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>