diff options
| author |   Pablo Neira Ayuso <pablo@netfilter.org> | 2018-02-27 17:58:18 +0100 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2018-02-27 19:08:17 +0100 |
| commit | 0e0d5002f8c047de92a41340cc67c39267eb9559 (patch) | |
| tree | 7376e88e34485702ab0eab247548732e4d115527 /net/netfilter/nf_tables_api.c | |
| parent | netfilter: nf_tables: missing attribute validation in nf_tables_delflowtable() (diff) | |
| download | linux-dev-0e0d5002f8c047de92a41340cc67c39267eb9559.tar.xz linux-dev-0e0d5002f8c047de92a41340cc67c39267eb9559.zip | |
netfilter: nf_tables: use the right index from flowtable error path
Use the right loop index, not the number of devices in the array that we
need to remove, the following message uncovered the problem:
[ 5437.044119] hook not found, pf 5 num 0
[ 5437.044140] WARNING: CPU: 2 PID: 24983 at net/netfilter/core.c:376 __nf_unregister_net_hook+0x250/0x280
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to '')
| -rw-r--r-- | net/netfilter/nf_tables_api.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/netfilter/nf_tables_api.c b/net/netfilter/nf_tables_api.c index 2b5aa78979db..558593e6a0a3 100644 --- a/net/netfilter/nf_tables_api.c +++ b/net/netfilter/nf_tables_api.c @@ -5136,7 +5136,7 @@ err5: i = flowtable->ops_len; err4: for (k = i - 1; k >= 0; k--) - nf_unregister_net_hook(net, &flowtable->ops[i]); + nf_unregister_net_hook(net, &flowtable->ops[k]); kfree(flowtable->ops); err3: |