diff options
| author | Taehee Yoo <ap420073@gmail.com> | 2019-03-19 05:22:41 +0100 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2019-03-20 08:32:58 +0100 |
| commit | b25a31bf0ca091aa8bdb9ab329b0226257568bbe (patch) | |
| tree | 7d4239b5e49c3c2686256226d33bdfdfdd75ef10 /firmware | |
| parent | netfilter: nf_flowtable: remove duplicated transition in diagram (diff) | |
| download | linux-b25a31bf0ca091aa8bdb9ab329b0226257568bbe.tar.xz linux-b25a31bf0ca091aa8bdb9ab329b0226257568bbe.zip | |
netfilter: nf_tables: add missing ->release_ops() in error path of newrule()
->release_ops() callback releases resources and this is used in error path.
If nf_tables_newrule() fails after ->select_ops(), it should release
resources. but it can not call ->destroy() because that should be called
after ->init().
At this point, ->release_ops() should be used for releasing resources.
Test commands:
modprobe -rv xt_tcpudp
iptables-nft -I INPUT -m tcp <-- error command
lsmod
Result:
Module Size Used by
xt_tcpudp 20480 2 <-- it should be 0
Fixes: b8e204006340 ("netfilter: nft_compat: use .release_ops and remove list of extension")
Signed-off-by: Taehee Yoo <ap420073@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'firmware')
0 files changed, 0 insertions, 0 deletions