Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 37012f7f authored by Pablo Neira Ayuso's avatar Pablo Neira Ayuso Committed by David S. Miller
Browse files

[NETFILTER]: fix conntrack refcount leak in unlink_expect() 



In unlink_expect(), the expectation is removed from the list so the
refcount must be dropped as well.

Signed-off-by: default avatarPablo Neira Ayuso <pablo@eurodev.net>
Signed-off-by: default avatarHarald Welte <laforge@netfilter.org>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent 14a50bba

net/ipv4/netfilter/ip_conntrack_core.c

+1 −0
Original line number Original line Diff line number Diff line
@@ -204,6 +204,7 @@ static void unlink_expect(struct ip_conntrack_expect *exp) 
	list_del(&exp->list);

	list_del(&exp->list);

	CONNTRACK_STAT_INC(expect_delete);

	CONNTRACK_STAT_INC(expect_delete);

	exp->master->expecting--;

	exp->master->expecting--;

	ip_conntrack_expect_put(exp);

}

}





void __ip_ct_expect_unlink_destroy(struct ip_conntrack_expect *exp)

void __ip_ct_expect_unlink_destroy(struct ip_conntrack_expect *exp)