On Fri, Apr 14, 2017 at 10:00:08AM +0800, gfree.w...@foxmail.com wrote: > From: Gao Feng <f...@ikuai8.com> > > There are two cases which causes refcnt leak. > > 1. When nf_ct_timeout_ext_add failed in xt_ct_set_timeout, it should > free the timeout refcnt. > Now goto the err_put_timeout error handler instead of going ahead. > > 2. When the time policy is not found, we should call module_put. > Otherwise, the related cthelper module cannot be removed anymore. > It is easy to reproduce by typing the following command: > # iptables -t raw -A OUTPUT -p tcp -j CT --helper ftp --timeout xxx
Applied, thanks. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
