Commit 403d89ad authored Oct 05, 2015 by Pablo Neira Ayuso

netfilter: xt_CT: don't put back reference to timeout policy object



On success, this shouldn't put back the timeout policy object, otherwise
we may have module refcount overflow and we allow deletion of timeout
that are still in use.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

parent a29a9a58

net/netfilter/xt_CT.c

+3 −0

Original line number	Diff line number	Diff line
		@@ -171,6 +171,9 @@ xt_ct_set_timeout(struct nf_conn ct, const struct xt_tgchk_param par,
		if (timeout_ext == NULL)
		ret = -ENOMEM;

		rcu_read_unlock();
		return ret;

		err_put_timeout:
		__xt_ct_tg_timeout_put(timeout);
		out: