diff options
| author | Taehee Yoo <ap420073@gmail.com> | 2019-03-19 07:22:41 +0300 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2019-03-20 10:32:58 +0300 |
| commit | b25a31bf0ca091aa8bdb9ab329b0226257568bbe (patch) | |
| tree | 7d4239b5e49c3c2686256226d33bdfdfdd75ef10 /Documentation/media/uapi/mediactl/request-api.rst | |
| parent | 7c9abe12b359d988970c5e38f0e190249e5ae00f (diff) | |
| download | linux-b25a31bf0ca091aa8bdb9ab329b0226257568bbe.tar.xz | |
netfilter: nf_tables: add missing ->release_ops() in error path of newrule()
->release_ops() callback releases resources and this is used in error path.
If nf_tables_newrule() fails after ->select_ops(), it should release
resources. but it can not call ->destroy() because that should be called
after ->init().
At this point, ->release_ops() should be used for releasing resources.
Test commands:
modprobe -rv xt_tcpudp
iptables-nft -I INPUT -m tcp <-- error command
lsmod
Result:
Module Size Used by
xt_tcpudp 20480 2 <-- it should be 0
Fixes: b8e204006340 ("netfilter: nft_compat: use .release_ops and remove list of extension")
Signed-off-by: Taehee Yoo <ap420073@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'Documentation/media/uapi/mediactl/request-api.rst')
0 files changed, 0 insertions, 0 deletions