diff options
| author |   Pablo Neira Ayuso <pablo@netfilter.org> | 2022-08-09 17:23:52 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2022-08-10 17:06:05 +0200 |
| commit | c485c35ff6783ccd12c160fcac6a0e504e83e0bf (patch) | |
| tree | 45fa7249eea21ad991362492888fb28a3548c775 /tools/scripts/ssh:/git@git.zx2c4.com | |
| parent | netfilter: nf_tables: disallow NFTA_SET_ELEM_KEY_END with NFT_SET_ELEM_INTERVAL_END flag (diff) | |
| download | linux-dev-c485c35ff6783ccd12c160fcac6a0e504e83e0bf.tar.xz linux-dev-c485c35ff6783ccd12c160fcac6a0e504e83e0bf.zip | |
netfilter: nf_tables: possible module reference underflow in error path
dst->ops is set on when nft_expr_clone() fails, but module refcount has
not been bumped yet, therefore nft_expr_destroy() leads to module
reference underflow.
Fixes: 8cfd9b0f8515 ("netfilter: nftables: generalize set expressions support")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tools/scripts/ssh:/git@git.zx2c4.com')
0 files changed, 0 insertions, 0 deletions