diff options
author | Taehee Yoo <ap420073@gmail.com> | 2019-03-19 13:22:41 +0900 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2019-03-20 08:32:58 +0100 |
commit | b25a31bf0ca091aa8bdb9ab329b0226257568bbe (patch) | |
tree | 7d4239b5e49c3c2686256226d33bdfdfdd75ef10 /net/bpf | |
parent | 7c9abe12b359d988970c5e38f0e190249e5ae00f (diff) | |
download | linux-b25a31bf0ca091aa8bdb9ab329b0226257568bbe.tar.gz linux-b25a31bf0ca091aa8bdb9ab329b0226257568bbe.tar.bz2 linux-b25a31bf0ca091aa8bdb9ab329b0226257568bbe.zip |
netfilter: nf_tables: add missing ->release_ops() in error path of newrule()
->release_ops() callback releases resources and this is used in error path.
If nf_tables_newrule() fails after ->select_ops(), it should release
resources. but it can not call ->destroy() because that should be called
after ->init().
At this point, ->release_ops() should be used for releasing resources.
Test commands:
modprobe -rv xt_tcpudp
iptables-nft -I INPUT -m tcp <-- error command
lsmod
Result:
Module Size Used by
xt_tcpudp 20480 2 <-- it should be 0
Fixes: b8e204006340 ("netfilter: nft_compat: use .release_ops and remove list of extension")
Signed-off-by: Taehee Yoo <ap420073@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/bpf')
0 files changed, 0 insertions, 0 deletions