8 files changed, 28 insertions, 70 deletions

diff --git a/net/sched/sch_api.c b/net/sched/sch_api.c
index 58732509160d..5b5bce0694e2 100644
--- a/net/sched/sch_api.c
+++ b/net/sched/sch_api.c
@@ -1220,6 +1220,24 @@ reclassify:
         return -1;
 }
 
+void tcf_destroy(struct tcf_proto *tp)
+{
+        tp->ops->destroy(tp);
+        module_put(tp->ops->owner);
+        kfree(tp);
+}
+
+void tcf_destroy_chain(struct tcf_proto *fl)
+{
+        struct tcf_proto *tp;
+
+        while ((tp = fl) != NULL) {
+                fl = tp->next;
+                tcf_destroy(tp);
+        }
+}
+EXPORT_SYMBOL(tcf_destroy_chain);
+
 #ifdef CONFIG_PROC_FS
 static int psched_show(struct seq_file *seq, void *v)
 {
diff --git a/net/sched/sch_atm.c b/net/sched/sch_atm.c
index 0cc3c9b72728..be7d299acd73 100644
--- a/net/sched/sch_atm.c
+++ b/net/sched/sch_atm.c
@@ -158,19 +158,6 @@ static unsigned long atm_tc_bind_filter(struct Qdisc *sch,
         return atm_tc_get(sch,classid);
 }
 
-
-static void destroy_filters(struct atm_flow_data *flow)
-{
-        struct tcf_proto *filter;
-
-        while ((filter = flow->filter_list)) {
-                DPRINTK("destroy_filters: destroying filter %p\n",filter);
-                flow->filter_list = filter->next;
-                tcf_destroy(filter);
-        }
-}
-
-
 /*
  * atm_tc_put handles all destructions, including the ones that are explicitly
  * requested (atm_tc_destroy, etc.). The assumption here is that we never drop
@@ -195,7 +182,7 @@ static void atm_tc_put(struct Qdisc *sch, unsigned long cl)
         *prev = flow->next;
         DPRINTK("atm_tc_put: qdisc %p\n",flow->q);
         qdisc_destroy(flow->q);
-        destroy_filters(flow);
+        tcf_destroy_chain(flow->filter_list);
         if (flow->sock) {
                 DPRINTK("atm_tc_put: f_count %d\n",
                     file_count(flow->sock->file));
@@ -611,7 +598,7 @@ static void atm_tc_destroy(struct Qdisc *sch)
         DPRINTK("atm_tc_destroy(sch %p,[qdisc %p])\n",sch,p);
         /* races ? */
         while ((flow = p->flows)) {
-                destroy_filters(flow);
+                tcf_destroy_chain(flow->filter_list);
                 if (flow->ref > 1)
                         printk(KERN_ERR "atm_destroy: %p->ref = %d\n",flow,
                             flow->ref);
diff --git a/net/sched/sch_cbq.c b/net/sched/sch_cbq.c
index 414a97c962f1..a294542cb8e4 100644
--- a/net/sched/sch_cbq.c
+++ b/net/sched/sch_cbq.c
@@ -1717,23 +1717,13 @@ static unsigned long cbq_get(struct Qdisc *sch, u32 classid)
         return 0;
 }
 
-static void cbq_destroy_filters(struct cbq_class *cl)
-{
-        struct tcf_proto *tp;
-
-        while ((tp = cl->filter_list) != NULL) {
-                cl->filter_list = tp->next;
-                tcf_destroy(tp);
-        }
-}
-
 static void cbq_destroy_class(struct Qdisc *sch, struct cbq_class *cl)
 {
         struct cbq_sched_data *q = qdisc_priv(sch);
 
         BUG_TRAP(!cl->filters);
 
-        cbq_destroy_filters(cl);
+        tcf_destroy_chain(cl->filter_list);
         qdisc_destroy(cl->q);
         qdisc_put_rtab(cl->R_tab);
 #ifdef CONFIG_NET_ESTIMATOR
@@ -1760,7 +1750,7 @@ cbq_destroy(struct Qdisc* sch)
          */
         for (h = 0; h < 16; h++)
                 for (cl = q->classes[h]; cl; cl = cl->next)
-                        cbq_destroy_filters(cl);
+                        tcf_destroy_chain(cl->filter_list);
 
         for (h = 0; h < 16; h++) {
                 struct cbq_class *next;
diff --git a/net/sched/sch_dsmark.c b/net/sched/sch_dsmark.c
index 2c857af79a1e..e38e0d00d1e6 100644
--- a/net/sched/sch_dsmark.c
+++ b/net/sched/sch_dsmark.c
@@ -412,16 +412,10 @@ static void dsmark_reset(struct Qdisc *sch)
 static void dsmark_destroy(struct Qdisc *sch)
 {
         struct dsmark_qdisc_data *p = PRIV(sch);
-        struct tcf_proto *tp;
 
         DPRINTK("dsmark_destroy(sch %p,[qdisc %p])\n", sch, p);
 
-        while (p->filter_list) {
-                tp = p->filter_list;
-                p->filter_list = tp->next;
-                tcf_destroy(tp);
-        }
-
+        tcf_destroy_chain(p->filter_list);
         qdisc_destroy(p->q);
         kfree(p->mask);
 }
diff --git a/net/sched/sch_hfsc.c b/net/sched/sch_hfsc.c
index 7d51d0d6a70e..9d124c4ee3a7 100644
--- a/net/sched/sch_hfsc.c
+++ b/net/sched/sch_hfsc.c
@@ -1122,22 +1122,11 @@ hfsc_change_class(struct Qdisc *sch, u32 classid, u32 parentid,
 }
 
 static void
-hfsc_destroy_filters(struct tcf_proto **fl)
-{
-        struct tcf_proto *tp;
-
-        while ((tp = *fl) != NULL) {
-                *fl = tp->next;
-                tcf_destroy(tp);
-        }
-}
-
-static void
 hfsc_destroy_class(struct Qdisc *sch, struct hfsc_class *cl)
 {
         struct hfsc_sched *q = qdisc_priv(sch);
 
-        hfsc_destroy_filters(&cl->filter_list);
+        tcf_destroy_chain(cl->filter_list);
         qdisc_destroy(cl->qdisc);
 #ifdef CONFIG_NET_ESTIMATOR
         gen_kill_estimator(&cl->bstats, &cl->rate_est);
diff --git a/net/sched/sch_htb.c b/net/sched/sch_htb.c
index 3f528554b0d4..99bcec8dd04c 100644
--- a/net/sched/sch_htb.c
+++ b/net/sched/sch_htb.c
@@ -1236,16 +1236,6 @@ static unsigned long htb_get(struct Qdisc *sch, u32 classid)
         return (unsigned long)cl;
 }
 
-static void htb_destroy_filters(struct tcf_proto **fl)
-{
-        struct tcf_proto *tp;
-
-        while ((tp = *fl) != NULL) {
-                *fl = tp->next;
-                tcf_destroy(tp);
-        }
-}
-
 static inline int htb_parent_last_child(struct htb_class *cl)
 {
         if (!cl->parent)
@@ -1289,7 +1279,7 @@ static void htb_destroy_class(struct Qdisc *sch, struct htb_class *cl)
         qdisc_put_rtab(cl->rate);
         qdisc_put_rtab(cl->ceil);
 
-        htb_destroy_filters(&cl->filter_list);
+        tcf_destroy_chain(cl->filter_list);
 
         while (!list_empty(&cl->children))
                 htb_destroy_class(sch, list_entry(cl->children.next,
@@ -1321,7 +1311,7 @@ static void htb_destroy(struct Qdisc *sch)
            and surprisingly it worked in 2.4. But it must precede it
            because filter need its target class alive to be able to call
            unbind_filter on it (without Oops). */
-        htb_destroy_filters(&q->filter_list);
+        tcf_destroy_chain(q->filter_list);
 
         while (!list_empty(&q->root))
                 htb_destroy_class(sch, list_entry(q->root.next,
diff --git a/net/sched/sch_ingress.c b/net/sched/sch_ingress.c
index f63d5c6eb302..1fb60aba1e6c 100644
--- a/net/sched/sch_ingress.c
+++ b/net/sched/sch_ingress.c
@@ -346,14 +346,9 @@ static void ingress_reset(struct Qdisc *sch)
 static void ingress_destroy(struct Qdisc *sch)
 {
         struct ingress_qdisc_data *p = PRIV(sch);
-        struct tcf_proto *tp;
 
         DPRINTK("ingress_destroy(sch %p,[qdisc %p])\n", sch, p);
-        while (p->filter_list) {
-                tp = p->filter_list;
-                p->filter_list = tp->next;
-                tcf_destroy(tp);
-        }
+        tcf_destroy_chain(p->filter_list);
 #if 0
 /* for future use */
         qdisc_destroy(p->q);
diff --git a/net/sched/sch_prio.c b/net/sched/sch_prio.c
index f13996348dda..5cfe60bf6e25 100644
--- a/net/sched/sch_prio.c
+++ b/net/sched/sch_prio.c
@@ -189,13 +189,8 @@ prio_destroy(struct Qdisc* sch)
 {
         int prio;
         struct prio_sched_data *q = qdisc_priv(sch);
-        struct tcf_proto *tp;
-
-        while ((tp = q->filter_list) != NULL) {
-                q->filter_list = tp->next;
-                tcf_destroy(tp);
-        }
 
+        tcf_destroy_chain(q->filter_list);
         for (prio=0; prio<q->bands; prio++)
                 qdisc_destroy(q->queues[prio]);
 }