On Sat, Apr 08, 2017 at 11:38:48AM +0800, Liping Zhang wrote: > From: Liping Zhang <zlpnobody@xxxxxxxxx> > > We should call module_put when the time policy is not found. Otherwise, > the related cthelper module cannot be removed anymore. > > It is easy to reproduce by typing the following command: > # iptables -t raw -A OUTPUT -p tcp -j CT --helper ftp --timeout xxx Can we fix all leaks in the error path in one single patch for xt_CT? Feng sent me a patch to fix another issue there, so if either you or him send me one single patch to fix all xt_CT refcount leaks in one go, I'd appreciate. Thanks. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
