Many thanks to Pablo for pointing me at ASAN reporting issues with the code valgrind had missed so far. This series fixes all reports so make check passes also when compiled with -fsanitize=address. Patch 1 is not quite related but rather a shortcoming in iptables-test.py I decided to fix while being at it. The remaining patches are actual fixes apart from patch 4 which pulls out unrelated (but sensible) changes from patch 5. Phil Sutter (7): tests: iptables-test: Increase non-fast mode strictness nft: ruleparse: Add missing braces around ternary libxtables: Fix memleak of matches' udata xtables-eb: Eliminate 'opts' define xshared: Fix for memleak in option merging with ebtables xshared: Introduce xtables_clear_args() ebtables: Fix for memleak with change counters command extensions/libxt_NFLOG.t | 2 +- extensions/libxt_TCPMSS.t | 2 +- iptables-test.py | 6 +++++- iptables/ip6tables.c | 5 +---- iptables/iptables.c | 5 +---- iptables/nft-cmd.c | 1 + iptables/nft-ruleparse.c | 2 +- iptables/xshared.c | 20 +++++++++++++++++--- iptables/xshared.h | 2 ++ iptables/xtables-eb.c | 29 +++++++++++++++++------------ iptables/xtables-translate.c | 12 +----------- iptables/xtables.c | 5 +---- libxtables/xtables.c | 10 ++++++---- 13 files changed, 55 insertions(+), 46 deletions(-) -- 2.43.0
