netfilter: nf_tables: fix double-free on set expression from the error path
authorPablo Neira Ayuso <pablo@netfilter.org>
Wed, 18 Mar 2020 00:14:58 +0000 (01:14 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 19 Mar 2020 10:37:31 +0000 (11:37 +0100)
commit772f4e82b3ffa1eb7412cd531f718a96a0e5474b
tree02f124a9b7488b8365888fac325b09abff16cf7f
parent65038428b2c6c5be79d3f78a6b79c0cdc3a58a41
netfilter: nf_tables: fix double-free on set expression from the error path

After copying the expression to the set element extension, release the
expression and reset the pointer to avoid a double-free from the error
path.

Fixes: 409444522976 ("netfilter: nf_tables: add elements with stateful expressions")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_tables_api.c