This is fixing up the use without proper initialization in patch 5/5
-o-
Hi,
The following patchset contains Netfilter fixes for net:
1) Missing #ifdef CONFIG_IP6_NF_IPTABLES in recent xt_socket fix.
2) Fix incorrect flow action array size in nf_tables.
3) Unregister flowtable hooks from netns exit path.
4) Fix missing limit object release, from Florian Westphal.
5) Memleak in nf_tables object update path, also from Florian.
Please, pull these changes from:
git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf.git
Thank you
----------------------------------------------------------------
The following changes since commit 143de8d97d79316590475dc2a84513c63c863ddf:
tipc: fix a bit overflow in tipc_crypto_key_rcv() (2022-02-13 12:12:25 +0000)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf.git HEAD
for you to fetch changes up to dad3bdeef45f81a6e90204bcc85360bb76eccec7:
netfilter: nf_tables: fix memory leak during stateful obj update (2022-02-22 08:28:04 +0100)
----------------------------------------------------------------
Florian Westphal (2):
netfilter: nft_limit: fix stateful object memory leak
netfilter: nf_tables: fix memory leak during stateful obj update
Pablo Neira Ayuso (3):
netfilter: xt_socket: missing ifdef CONFIG_IP6_NF_IPTABLES dependency
netfilter: nf_tables_offload: incorrect flow offload action array size
netfilter: nf_tables: unregister flowtable hooks on netns exit
include/net/netfilter/nf_tables.h | 2 +-
include/net/netfilter/nf_tables_offload.h | 2 --
net/netfilter/nf_tables_api.c | 16 ++++++++++++----
net/netfilter/nf_tables_offload.c | 3 ++-
net/netfilter/nft_dup_netdev.c | 6 ++++++
net/netfilter/nft_fwd_netdev.c | 6 ++++++
net/netfilter/nft_immediate.c | 12 +++++++++++-
net/netfilter/nft_limit.c | 18 ++++++++++++++++++
net/netfilter/xt_socket.c | 2 ++
9 files changed, 58 insertions(+), 9 deletions(-)
