Florian Westphal <fw@xxxxxxxxx> wrote: > --- a/src/conntrack/api.c > +++ b/src/conntrack/api.c > @@ -95,6 +95,8 @@ void nfct_destroy(struct nf_conntrack *ct) > free(ct->secctx); > if (ct->helper_info) > free(ct->helper_info); > + if (ct->connlabels) > + nfct_bitmask_destroy(ct->connlabels); > free(ct); > ct = NULL; /* bugtrap */ > } Will cause double-free for nfct_cloned objects. I'll fix nfct_clone and will add the missing nfct_copy* handling in the next iteration, some time next week. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
