netfilter: ipt_CLUSTERIP: put config instead of freeing it
authorFlorian Westphal <fw@strlen.de>
Fri, 16 Feb 2018 11:49:33 +0000 (12:49 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Sun, 25 Feb 2018 19:02:51 +0000 (20:02 +0100)
commit1a9da5937386dbe553ffcf6c65d985bd48c347c5
treef36b3e66662b97534c91743863b0c7456c4f486c
parent8ae56822812ddedc26a152ab1916eb30120b4748
netfilter: ipt_CLUSTERIP: put config instead of freeing it

Once struct is added to per-netns list it becomes visible to other cpus,
so we cannot use kfree().

Also delay setting entries refcount to 1 until after everything is
initialised so that when we call clusterip_config_put() in this spot
entries is still zero.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/ipv4/netfilter/ipt_CLUSTERIP.c