]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nf_tables: free chain context when BINDING flag is missing
authorFlorian Westphal <fw@strlen.de>
Tue, 11 Aug 2020 17:39:09 +0000 (19:39 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 13 Aug 2020 02:17:46 +0000 (04:17 +0200)
commit9e39ff608de0685086bb4753250938b87d908c48
tree089f379fd710cc74199b32745bd6f22e102d2cea
parenta089691d92f1d2a5a3de64dca0e8ca84d878d435
netfilter: nf_tables: free chain context when BINDING flag is missing

syzbot found a memory leak in nf_tables_addchain() because the chain
object is not free'd correctly on error.

Fixes: 2afcd17bdf11 ("netfilter: nf_tables: add NFT_CHAIN_BINDING")
Reported-by: syzbot+c99868fde67014f7e9f5@syzkaller.appspotmail.com
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_tables_api.c