On Wed, Oct 19, 2011 at 01:23:06PM +0200, Florian Westphal wrote: > Several callers (h323 conntrack, xt_addrtype) assume that the > returned **dst only needs to be released if the function returns 0. > > This is true for the ipv4 implementation, but not for the ipv6 one. > > Instead of changing the users, change the ipv6 implementation > to behave like the ipv4 version by only providing the dst_entry result > in the success case. Indeed, we're leaking refcounts of template routes defined in net/ipv6/route.c I have applied this patch to my nf branch: http://1984.lsi.us.es/git/?p=net/.git;a=shortlog;h=refs/heads/nf Thanks Florian. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html