Hello, This is just a small patch that free's unused memory in iptables.c::merge_options(). It's vs the file in the CVS.
-- cheers, Bart
--- iptables.c.old Mon Jun 24 14:37:29 2002 +++ iptables.c Wed Jun 26 23:05:34 2002 @@ -986,6 +986,8 @@ merge[num_old + i].val += *option_offset; } memset(merge + num_old + num_new, 0, sizeof(struct option)); + if (oldopts != original_opts) + free(oldopts); return merge; }