diff options
| author | Liping Zhang <zlpnobody@gmail.com> | 2016-10-22 18:51:25 +0800 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2016-10-27 18:20:45 +0200 |
| commit | 61f9e2924f4981d626b3a931fed935f2fa3cb4de (patch) | |
| tree | 77d9f1c293690b43f9d858294e3164b464edd5fa /drivers | |
| parent | bb6a6e8e091353770074608c1d1bfde0e20b8154 (diff) | |
| download | linux-stable-61f9e2924f4981d626b3a931fed935f2fa3cb4de.tar.gz linux-stable-61f9e2924f4981d626b3a931fed935f2fa3cb4de.tar.bz2 linux-stable-61f9e2924f4981d626b3a931fed935f2fa3cb4de.zip | |
netfilter: nf_tables: fix *leak* when expr clone fail
When nft_expr_clone failed, a series of problems will happen:
1. module refcnt will leak, we call __module_get at the beginning but
we forget to put it back if ops->clone returns fail
2. memory will be leaked, if clone fail, we just return NULL and forget
to free the alloced element
3. set->nelems will become incorrect when set->size is specified. If
clone fail, we should decrease the set->nelems
Now this patch fixes these problems. And fortunately, clone fail will
only happen on counter expression when memory is exhausted.
Fixes: 086f332167d6 ("netfilter: nf_tables: add clone interface to expression operations")
Signed-off-by: Liping Zhang <zlpnobody@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'drivers')
0 files changed, 0 insertions, 0 deletions