From: Phil Sutter <phil@nwl.cc>
Date: Wed, 13 Feb 2019 10:11:23 +0000 (+0100)
Subject: xtables: Fix error message when zeroing a non-existent chain
X-Git-Tag: v1.8.3~51
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=eed2c6af53ef69df493e8ace70e59096b2149917;p=thirdparty%2Fiptables.git

xtables: Fix error message when zeroing a non-existent chain

Previously, error message was a bit misleading:

| # iptables-nft -Z noexist
| iptables: Incompatible with this kernel.

Set errno value so that the typical "No chain/target/match by that
name." is printed instead.

Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
---

diff --git a/iptables/nft.c b/iptables/nft.c
index d708fb61..60b0531f 100644
--- a/iptables/nft.c
+++ b/iptables/nft.c
@@ -3235,8 +3235,10 @@ int nft_chain_zero_counters(struct nft_handle *h, const char *chain,
 
 	if (chain) {
 		c = nftnl_chain_list_lookup_byname(list, chain);
-		if (!c)
+		if (!c) {
+			errno = ENOENT;
 			return 0;
+		}
 
 		ret = __nft_chain_zero_counters(c, &d);
 		goto err;