]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nf_tables: uninitialize element key/data from the commit path
authorPablo Neira Ayuso <pablo@netfilter.org>
Fri, 1 Aug 2014 17:32:41 +0000 (19:32 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 8 Aug 2014 13:38:46 +0000 (15:38 +0200)
commite5ade72eda05192d085986e8defbc91a58e9439e
tree1d263f1e8ac0c42bbfb259dea32111ae6bf34280
parentae59010f1d751173104c039b45f477ae1860beca
netfilter: nf_tables: uninitialize element key/data from the commit path

This should happen once the element has been effectively released in
the commit path, not before. This fixes a possible chain refcount leak
if the transaction is aborted.

Reported-by: Thomas Graf <tgraf@suug.ch>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_tables_api.c