summaryrefslogtreecommitdiffstats
path: root/net/netfilter/nf_flow_table_ip.c
diff options
context:
space:
mode:
authorTaehee Yoo2019-04-29 18:55:29 +0200
committerPablo Neira Ayuso2019-04-30 13:55:00 +0200
commit26a302afbe328ecb7507cae2035d938e6635131b (patch)
tree7a93c05288668c8a07499157fba68bfd3bcf2f7d /net/netfilter/nf_flow_table_ip.c
parentnetfilter: nft_flow_offload: add entry to flowtable after confirmation (diff)
downloadkernel-qcow2-linux-26a302afbe328ecb7507cae2035d938e6635131b.tar.gz
kernel-qcow2-linux-26a302afbe328ecb7507cae2035d938e6635131b.tar.xz
kernel-qcow2-linux-26a302afbe328ecb7507cae2035d938e6635131b.zip
netfilter: nf_flow_table: fix netdev refcnt leak
flow_offload_alloc() calls nf_route() to get a dst_entry. Internally, nf_route() calls ip_route_output_key() that allocates a dst_entry and holds it. So, a dst_entry should be released by dst_release() if nf_route() is successful. Otherwise, netns exit routine cannot be finished and the following message is printed: [ 257.490952] unregister_netdevice: waiting for lo to become free. Usage count = 1 Fixes: ac2a66665e23 ("netfilter: add generic flow table infrastructure") Signed-off-by: Taehee Yoo <ap420073@gmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/nf_flow_table_ip.c')
0 files changed, 0 insertions, 0 deletions