[libvirt] [PATCH 1/2] nwfilter: address coverity findings