Re: [PATCH nf] netfilter: nft_ct: fix use after free when attaching zone template

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sun, Jan 23, 2022 at 03:24:00PM +0100, Florian Westphal wrote:
> The conversion erronously removed the refcount increment.
> In case we can use the percpu template, we need to increment
> the refcount, else it will be released when the skb gets freed.
> 
> In case the slowpath is taken, the new template already has a
> refcount of 1.

Applied, thanks



[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux