bugfix: close fd_fake_c/fd_fake_s on error

1 files changed, 8 insertions, 0 deletions

diff --git a/platform/src/acceptor_kni_v3.cpp b/platform/src/acceptor_kni_v3.cpp
index f0d7282..ac50f3b 100644
--- a/platform/src/acceptor_kni_v3.cpp
+++ b/platform/src/acceptor_kni_v3.cpp
@@ -800,6 +800,14 @@ static int payload_handler_cb(struct nfq_q_handle *qh, struct nfgenmsg *nfmsg, s
 	return nfq_set_verdict(qh, id, NF_ACCEPT, pktinfo.ip_totlen, raw_payload);
 
 end:
+	if (fd_fake_c > 0)
+	{
+		close(fd_fake_c);
+	}
+	if (fd_fake_s > 0)
+	{
+		close(fd_fake_s);
+	}
 	if (fd_upstream > 0)
 	{
 		TFE_PROXY_STAT_INCREASE(STAT_FD_CLOSE_BY_KNI_ACCEPT_FAIL, 1);