projects / platform / kernel / linux-rpi.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 97cbb82) | patch
netfilter: nft_immediate: drop chain reference counter on error
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 1 Jan 2024 19:15:33 +0000 (20:15 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 10 Jan 2024 16:16:51 +0000 (17:16 +0100)
commit9824064683a74aa307575d18da14fd0f061f1055
treefbfd15fa471f78604d3ad99cf6ea78126471ce9btree | snapshot
parent97cbb828482a1870d804629ae3087554565d2539commit | diff
netfilter: nft_immediate: drop chain reference counter on error

[ Upstream commit b29be0ca8e816119ccdf95cc7d7c7be9bde005f1 ]

In the init path, nft_data_init() bumps the chain reference counter,
decrement it on error by following the error path which calls
nft_data_release() to restore it.

Fixes: 4bedf9eee016 ("netfilter: nf_tables: fix chain binding transaction logic")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nft_immediate.c diff | blob | history
Domain: System / Kernel;